Input Validation for ASP.NET Core CASENET Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A developer is building an ASP.NET Core MVC form with client-side validation. The form uses jQuery and unobtrusive validation. The developer has added data annotation attributes to the model, but the client-side validation is not firing. The developer has already included the jQuery, jQuery.Validation, and jQuery.Validation.Unobtrusive scripts. What else is required for client-side validation to work?

   • ACall the .validate() method on the form in a document ready script.
   • BAdd the [Remote] attribute to every property that needs validation.
   • CEnsure the form elements are rendered with the asp-for tag helper and that the validation scripts are included in the correct order.
   • DSet the form's novalidate attribute to false.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which attribute is used to enable remote validation for a model property in ASP.NET Core?

   • A[ServerValidate]
   • B[Remote]
   • C[AjaxValidate]
   • D[ValidateRemote]
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A security review of an ASP.NET Core Web API reveals that a comment field is stored and later rendered in HTML without encoding. The development team plans to add a [RegularExpression] attribute to the comment field to block HTML tags. A senior engineer argues that this is insufficient. Which additional measure is necessary to prevent stored XSS?

   • AStore the comment in a database column with a limited length.
   • BUse the [Remote] attribute to validate the comment asynchronously.
   • CEncode the output when rendering the comment in any HTML page.
   • DUse a custom validation attribute that strips HTML tags from the input.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   An ASP.NET Core MVC application has a model that implements IValidatableObject. The Validate method returns a ValidationResult with a member name that does not match any property on the model. What is the effect of this?

   • AThe error is displayed at the top of the form automatically.
   • BThe application throws an exception.
   • CThe error is ignored and no validation failure is recorded.
   • DThe error is added to ModelState with a key that does not correspond to a property, so it may not be displayed by asp-validation-for tag helpers.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the standard structured error response format used by ASP.NET Core API controllers when validation fails?

   • AXML with a <errors> root element.
   • BA simple string with the first error message.
   • CProblemDetails (RFC 7807)
   • DA custom HTML error page.
   Reveal Solution Discussion Select an answer first