Input Validation for MVC CASENET Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which data annotation attribute would you apply to a model property to ensure that the user provides a value?

   • A[StringLength]
   • B[RegularExpression]
   • C[Required]
   • D[Range]
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which of the following is an example of whitelist validation?

   • ARejecting input that contains the word 'DROP'
   • BRemoving all occurrences of single quotes
   • CBlocking the string '<script>' in input
   • DAllowing only letters, numbers, and underscore in a username field
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following attack vectors is most directly mitigated by proper input validation in an MVC application?

   • ASession hijacking via stolen cookies
   • BDenial of service (DoS) via network flooding
   • CSQL injection
   • DMan-in-the-middle (MITM) attacks on TLS
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A community forum application allows users to post comments. The development team is concerned about Cross-Site Scripting (XSS) attacks where users could inject malicious scripts into the comments. The team wants to ensure that user input is displayed safely in the views. Which approach should be used?

   • AUse the default Razor syntax (@Model.Comment) to render the user's comment in the view.
   • BUse the @Html.Raw() helper to render the user's comment directly in the view.
   • CUse a JavaScript function to escape the comment before displaying it.
   • DUse the [AllowHtml] attribute on the Comment property to allow HTML content.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the purpose of implementing IValidatableObject on a model class?

   • ATo perform validation that involves multiple properties or complex logic
   • BTo automatically generate client-side validation scripts
   • CTo bind form data to the model
   • DTo validate a single property using a regular expression
   Reveal Solution Discussion Select an answer first