A penetration tester submitted data to a form in a web application, which enabled the penetration tester to retrieve user credentials. Which of the following should be recommended for remediation of…

Question

Options

• AImplementing multifactor authentication on the server OS
• BHashing user passwords on the web application
• CPerforming input validation before allowing submission
• DSegmenting the network between the users and the web server

• A
  17% (9)
• B
  4% (2)
• C
  70% (38)
• D
  9% (5)

Explanation

Performing input validation before allowing submission is the best recommendation for remediation of this application vulnerability. Input validation is a technique that checks the data entered by users or attackers against a set of rules or constraints, such as data type, length, format, or range. Input validation can prevent common web application attacks such as SQL injection, cross-site scripting (XSS), or command injection, which exploit the lack of input validation to execute malicious code or commands on the server or the client side. By validating the input before allowing submission, the web application can reject or sanitize any malicious or unexpected input, and protect the user credentials and other sensitive data from being

No community discussion yet for this question.