What technique should a web application use to confirm that values sent by clients conform to the expected data types and formats?

Cloud Audit Logging records administrative activities and access events within a cloud environment, which is an auditing mechanism, not a technique for confirming client-sent data types and formats.

Input validation is the process of checking data received from a client (e.g., user input, API calls) against a set of predefined rules to ensure it is in the correct format, type, and within acceptable ranges, preventing injection attacks, buffer overflows, and other data-related vulnerabilities. It is a critical defense against malicious or malformed data.

Error and exception handling manages unexpected events or errors during program execution, but it occurs after data has been processed and an issue arises, not as a primary method for validating initial input.

Output sanitization modifies or encodes data before it is displayed or sent back to the client to prevent output-related attacks like Cross-Site Scripting (XSS), and it operates on output, not incoming client values.