Which of the following is a common coding error in which boundary checking is not performed?

The correct answer is A. Input validation. The common coding error described - where boundary checking is not performed - is the failure to implement proper input validation. When code does not validate that input stays within expected boundaries (e.g., checking that a string doesn't exceed a buffer's length), it leads…

Threats, vulnerabilities, and mitigations

Question

Options

AInput validation
BFuzzing
CSecure coding
DCross-site scripting

How the community answered

(35 responses)

A
89% (31)
B
3% (1)
C
6% (2)
D
3% (1)

Explanation

The common coding error described - where boundary checking is not performed - is the failure to implement proper input validation. When code does not validate that input stays within expected boundaries (e.g., checking that a string doesn't exceed a buffer's length), it leads to vulnerabilities like buffer overflows. Input validation is the secure coding practice that prevents this; its absence is the error. Fuzzing (B) is a testing technique that sends unexpected input to find bugs. Secure coding (C) is the overall practice. Cross-site scripting (D) is a specific vulnerability type, not a category of coding error related to boundary checking.

Topics

#input validation#boundary checking#secure coding#application security

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice