Secure Programming Practices › Secure Programming Practices › Question #23264
MCQ Single Best Answer Difficult

QIn a multi-staged login mechanism, which of the following regarding application security should be ensured by the developer?

ID: #23264 Secure Programming Practices 1,350 views
Question Info
#23264Q ID
DifficultDifficulty
Secure Programming PracticesTopic
Start Quiz on This Topic
 Your Answer

Choose the Best Option

Click any option to instantly check if you're correct.

  • A Hidden variables must be used to remember the previous stage values, and current stage supplier credentials must be validated at the server end. ✔ ✖
  • B Credentials given during the previous stage should be saved in a persistent cookie, and the current stage supplier credentials must be validated at the server end. ✔ ✖
  • C The application should validate the credentials supplied at each stage and the previous stages. ✔ ✖
  • D The application must validate the credentials given at each stage only ✔ ✖
Correct Answer: Option C

Explanation

The correct answer is:

The application should validate the credentials supplied at each stage and the previous stages.

Explanation: In a multi-staged login mechanism, it is essential to ensure that credentials are validated at each step, and the application must verify that the credentials provided at each stage are legitimate and correspond to the previous stages. This helps prevent unauthorized access and ensures that the user has passed all stages of the authentication process securely. It also avoids relying solely on hidden variables or cookies, which could be manipulated or stolen.

 Continue Practice
Previous Question Next Question
 Share

Share This Question

Challenge a friend or share with your study group.

 More from This Topic

Related MCQ Questions

Security check can be enforced at compile time by: Which of the following are secure programming guidelines? A) Always validate input for public methods. B) Neve Exception Handling refers to: Proprietary protocols and data formats are: Which of the following methods can be used by the client and server to validate user input? A) Validation usin Identify the correct statement in the following: Which of the following is not recommended to secure web applications against authenticated users? To improve the overall quality of web applications, developers should abide by which of the following rules? A race condition in a web server can cause which of the following? If an attacker submits multiple input parameters (query string, post data, cookies, etc) of the same name, the