Secure Programming Practices › Secure Programming Practices › Question #23268
MCQ Single Best Answer Difficult

QWhich of the following is not recommended to secure web applications against authenticated users?

ID: #23268 Secure Programming Practices 176 views
Question Info
#23268Q ID
DifficultDifficulty
Secure Programming PracticesTopic
Start Quiz on This Topic
 Your Answer

Choose the Best Option

Click any option to instantly check if you're correct.

  • A Filtering data with a default deny regular expression ✔ ✖
  • B Client-side data validation ✔ ✖
  • C Using parameterized queries to access a database ✔ ✖
  • D Running the application with least privileges ✔ ✖
Correct Answer: Option B

Explanation

The correct answer is:

Client-side data validation

Explanation: While client-side data validation can improve user experience and reduce server load, it is not recommended as the sole security measure for web applications. Since client-side validation can be bypassed (e.g., by manipulating the client-side code), it should not be relied upon to secure the application.

Instead, the following measures are more secure:

  • Filtering data with a default deny regular expression: Helps prevent malicious input.
  • Using parameterized queries to access a database: Prevents SQL injection attacks.
  • Running the application with least privileges: Reduces the potential impact of a security breach.

Server-side validation and secure coding practices are essential for proper security.

 Continue Practice
Previous Question No Next
 Share

Share This Question

Challenge a friend or share with your study group.

 More from This Topic

Related MCQ Questions

In a multi-staged login mechanism, which of the following regarding application security should be ensured by Security check can be enforced at compile time by: Which of the following are secure programming guidelines? A) Always validate input for public methods. B) Neve Exception Handling refers to: Proprietary protocols and data formats are: Which of the following methods can be used by the client and server to validate user input? A) Validation usin Identify the correct statement in the following: To improve the overall quality of web applications, developers should abide by which of the following rules? A race condition in a web server can cause which of the following? Securing a database application with username/password access control should be considered sufficient: