An ASP.NET Core MVC view uses a custom validation attribute that is not a built-in data annotation. The team wants client-side validation to work for this custom attribute without writing custom JavaScript. What is the most appropriate approach?

Use a [RegularExpression] attribute instead of the custom attribute.

Add a JavaScript function that manually checks the input and displays errors.

Implement IClientModelValidator on the custom attribute and add an adapter in JavaScript to handle the data attribute.

Use the [Remote] attribute to perform the validation on the server.

A developer is writing a background service in ASP.NET Core that processes a queue of objects. These objects are not bound from HTTP requests, but they have data annotation attributes. The team wants to validate these objects before processing. What is the most appropriate way to validate them?

Use the Validator.TryValidateObject method to validate the object and inspect the results.

Manually check each property with if statements in the processing logic.

Call ModelState.IsValid on the object.

Use the [Remote] attribute to validate the object asynchronously.

EC-CouncilCertified Application Security Engineer (.NET)

Domain 3Objective 3

Input Validation for ASP.NET Core CASENET Practice Questions (Page 3)

Part of the Secure Coding: Input Validation domain, which makes up ~11% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–9 in this domain), expect 2–2 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

11concepts

11 Concepts in This Objective

Understanding Input Validation in ASP.NET Core
Model Validation with Data Annotations
Custom Validation Attributes
IValidatableObject Interface
Validation in Controller Actions
Client-Side Validation
Remote Validation
Validation for API Controllers
Manual Validation
Handling Validation Errors
Security Considerations in Validation

Questions 11–15

11foundation · easy
To create a custom validation attribute in ASP.NET Core, which base class should you derive from?
Select an answer first
12foundation · easy
Which method must be overridden in a custom ValidationAttribute to provide the validation logic?
Select an answer first
13expert · hard
An ASP.NET Core MVC view uses a custom validation attribute that is not a built-in data annotation. The team wants client-side validation to work for this custom attribute without writing custom JavaScript. What is the most appropriate approach?
Select an answer first
14foundation · easy
In an ASP.NET Core MVC controller action, what should you check to determine if model validation failed?
Select an answer first
15application · medium
A developer is writing a background service in ASP.NET Core that processes a queue of objects. These objects are not bound from HTTP requests, but they have data annotation attributes. The team wants to validate these objects before processing. What is the most appropriate way to validate them?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CASENET

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CASENET” is a trademark of its owner, used for identification only.

Input Validation for ASP.NET Core CASENET Practice Questions (Page 3)

Questions 11–15

To create a custom validation attribute in ASP.NET Core, which base class should you derive from?

Which method must be overridden in a custom ValidationAttribute to provide the validation logic?

An ASP.NET Core MVC view uses a custom validation attribute that is not a built-in data annotation. The team wants client-side validation to work for this custom attribute without writing custom JavaScript. What is the most appropriate approach?

In an ASP.NET Core MVC controller action, what should you check to determine if model validation failed?

A developer is writing a background service in ASP.NET Core that processes a queue of objects. These objects are not bound from HTTP requests, but they have data annotation attributes. The team wants to validate these objects before processing. What is the most appropriate way to validate them?

Keep studying — Secure Coding: Input Validation