Input Validation for MVC CASENET Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What does the ModelState.IsValid property indicate in an ASP.NET MVC controller action?

   • AWhether the model passed all validation rules
   • BWhether the model was successfully bound from the form
   • CWhether the user is authenticated
   • DWhether the database save was successful
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   An MVC controller action accepts a POST request with a Comment model. The action needs to handle the case where the model is invalid. The application supports both traditional form posts and AJAX requests. Which implementation correctly handles both scenarios?

   • AThrow an exception when ModelState is invalid and let the global handler decide the response.
   • BAlways return a JSON response with errors when ModelState is invalid.
   • CCheck if Request.Headers["X-Requested-With"] == "XMLHttpRequest" to determine if it's an AJAX request; if so, return a JSON response with errors; otherwise, return the view with the model.
   • DAlways return the view with the model when ModelState is invalid.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A banking application has a form for transferring funds between accounts. The security team is concerned about Cross-Site Request Forgery (CSRF) attacks. The development team needs to ensure that the form submission is protected against CSRF while still performing input validation on the amount and account number. Which approach should be used?

   • AUse a [RegularExpression] attribute on the AccountNumber property to ensure it matches a valid format.
   • BAdd the [ValidateAntiForgeryToken] attribute to the controller action and include the @Html.AntiForgeryToken() helper in the form.
   • CAdd a [Remote] validation attribute to the Amount property to check the amount against the server.
   • DRely on the [Authorize] attribute on the controller action to prevent CSRF attacks.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   In a controller action that processes a form POST, what should you do if ModelState.IsValid is false?

   • AReturn the view with the current model so errors can be displayed
   • BThrow an exception to stop processing
   • CRedirect to the same action to clear the errors
   • DIgnore the errors and continue processing
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is a best practice when logging validation errors?

   • ALog the full stack trace for every validation failure
   • BLog the user's password to help debug
   • CInclude the property name and a generic error code, but avoid logging sensitive user data
   • DDisable logging in production to save space
   Reveal Solution Discussion Select an answer first