Input Validation for MVC CASENET Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which HTML helper is used to generate an anti-forgery token in an MVC form?

   • A@Html.AntiForgeryToken()
   • B@Html.ValidationSummary()
   • C@Html.TextBoxFor()
   • D@Html.BeginForm()
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which attribute is used to specify a server-side action for remote validation?

   • A[Ajax]
   • B[Remote(action, controller)]
   • C[HttpPost]
   • D[ValidateInput]
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   In an ASP.NET MVC application, what is the primary purpose of client-side validation?

   • ATo reduce the need for server-side validation
   • BTo encrypt data before it is sent to the server
   • CTo enforce security rules that cannot be validated on the server
   • DTo improve user experience by providing immediate feedback without a round trip to the server
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   In the MVC pattern, what is the primary role of input validation?

   • ATo ensure that data entered by users conforms to expected formats and constraints before it is processed
   • BTo authenticate users before they can submit forms
   • CTo encrypt all user input before it is stored in the database
   • DTo ensure that the view renders only approved HTML content
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   An MVC application has a view that displays user-generated content. The content is stored in a database and can contain HTML formatting. The developer needs to prevent stored XSS while allowing safe HTML formatting like bold and italic. The current implementation uses @Html.Raw(Model.Content). Which change is most appropriate?

   • AReplace @Html.Raw with @Model.Content to automatically encode the output.
   • BUse a JavaScript library to sanitize the content on the client side before rendering.
   • CUse @Html.Raw(Model.Content) but add a Content-Security-Policy header to block scripts.
   • DSanitize the content server-side with an HTML sanitizer library that allows only safe tags like <b> and <i>, then use @Html.Raw to render it.
   Reveal Solution Discussion Select an answer first