Q: In a multi-staged login mechanism, which of the following regarding application security should be ensured by the developer?
-
A
Hidden variables must be used to remember the previous stage values, and current stage supplier credentials must be validated at the server end.
-
B
Credentials given during the previous stage should be saved in a persistent cookie, and the current stage supplier credentials must be validated at the server end.
-
C
The application should validate the credentials supplied at each stage and the previous stages.
-
D
The application must validate the credentials given at each stage only
C
Answer:
C
Explanation:
The correct answer is:
The application should validate the credentials supplied at each stage and the previous stages.
Explanation: In a multi-staged login mechanism, it is essential to ensure that credentials are validated at each step, and the application must verify that the credentials provided at each stage are legitimate and correspond to the previous stages. This helps prevent unauthorized access and ensures that the user has passed all stages of the authentication process securely. It also avoids relying solely on hidden variables or cookies, which could be manipulated or stolen.
Related Topic:
Share Above MCQ