Input Validation for ASP.NET Core CASENET Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which method must be implemented when a class implements IValidatableObject?

   • AValidate(ValidationContext validationContext)
   • BIsValid(object value)
   • CGetValidationResult()
   • DOnModelCreating(ModelBuilder modelBuilder)
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A security review of an ASP.NET Core MVC application found that a search form accepts a query string and directly interpolates it into a SQL query. The team wants to mitigate SQL injection while still validating the input length. What should they do?

   • AEncode the input using HtmlEncoder before using it in the SQL query.
   • BUse parameterized queries or an ORM, and apply a [StringLength] attribute to limit the query length.
   • CSanitize the input by removing single quotes and other special characters.
   • DOnly apply a [StringLength] attribute to the query parameter.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is the purpose of implementing IValidatableObject on a model class?

   • ATo perform validation that depends on multiple properties of the same model.
   • BTo automatically generate database constraints.
   • CTo enable client-side validation without JavaScript.
   • DTo replace all data annotation attributes.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which type of attack can be mitigated by validating that a string field does not contain HTML tags?

   • ACross-site scripting (XSS)
   • BMan-in-the-middle (MITM)
   • CDenial of service (DoS)
   • DBrute force attacks
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   An ASP.NET Core MVC registration form has a `Username` field. The team wants to check asynchronously whether the username is already taken, without posting the entire form. Which approach should they use?

   • AImplement IValidatableObject to check the database in the Validate method.
   • BWrite a JavaScript function that calls the server using fetch and manually adds an error message.
   • CApply the [Remote] attribute to the Username property and implement an action method that returns a JSON result indicating availability.
   • DUse a custom validation attribute that queries the database during model binding.
   Reveal Solution Discussion Select an answer first