SY0-301 · Question #173
Input validation is an important security defense because it:
The correct answer is A. rejects bad or malformed data. Input validation is the process of inspecting and sanitizing data supplied by users or external systems before it is processed. Its primary security value is that it rejects unexpected, malformed, or malicious data - preventing attacks like SQL injection, XSS, buffer overflows…
Question
Input validation is an important security defense because it:
Options
- Arejects bad or malformed data.
- Benables verbose error reporting.
- Cprotects mis-configured web servers.
- Dprevents denial of service attacks.
How the community answered
(38 responses)- A89% (34)
- B5% (2)
- C3% (1)
- D3% (1)
Explanation
Input validation is the process of inspecting and sanitizing data supplied by users or external systems before it is processed. Its primary security value is that it rejects unexpected, malformed, or malicious data - preventing attacks like SQL injection, XSS, buffer overflows, and command injection. Verbose error reporting is actually a security risk (it exposes implementation details). Input validation does not inherently protect misconfigured servers or prevent all DoS attacks; those require separate controls.
Topics
Community Discussion
No community discussion yet for this question.