Input Validation for ASP.NET Core CASENET Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   An ASP.NET Core Web API has a model with a `Quantity` property that must be an integer between 1 and 100. The team wants to ensure that non-integer values are rejected with a clear error message. They are using [ApiController]. What is the best way to achieve this?

   • AUse a custom validation attribute that parses the value as an integer and checks the range.
   • BChange the property type to string and manually parse it in the action.
   • CUse [RegularExpression] with a pattern that matches numbers from 1 to 100.
   • DUse [Range(1, 100)] on the property and let the automatic 400 response handle the error.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which data annotation attribute enforces that a string property must have a minimum and maximum number of characters?

   • A[MaxLength]
   • B[Required]
   • C[StringLength]
   • D[Range]
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A developer is building an ASP.NET Core Web API with an [ApiController] attribute on the controller. The API accepts a CreateOrderRequest model with data annotations. When validation fails, the API should automatically return a structured error response. What is the default behavior of [ApiController] when model validation fails?

   • AIt automatically returns a 400 Bad Request with a ValidationProblemDetails response body.
   • BIt throws a ModelStateException that must be caught in a global exception handler.
   • CIt returns a 200 OK with an empty response body.
   • DIt redirects to an error page.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which of the following is a common risk of accepting unvalidated input in an ASP.NET Core application?

   • AFaster response times due to fewer checks.
   • BIncreased CPU usage due to extra parsing.
   • CAutomatic enabling of debug mode.
   • DSQL injection through malicious query strings.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A developer is building an ASP.NET Core Web API with [ApiController] and wants to return a custom error response that includes a correlation ID for logging. The default automatic validation response does not include the correlation ID. What is the most maintainable way to achieve this?

   • AOverride the OnActionExecuting method in the base controller to modify the response.
   • BImplement a custom IAlwaysRunResultFilter that replaces the ValidationProblemDetails response with a custom object that includes the correlation ID.
   • CUse a custom validation attribute that adds the correlation ID to the error message.
   • DRemove [ApiController] and manually check ModelState in every action, returning a custom response.
   Reveal Solution Discussion Select an answer first