
EC-CouncilCertified Application Security Engineer (.NET)
Domain 3Objective 4
Input Validation for MVC CASENET Practice Questions (Page 7)
Part of the Secure Coding: Input Validation domain, which makes up ~11% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–9 in this domain), expect 2–2 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)
52questions here
11free pages
15concepts
Questions 31–35
- 31
An MVC application has a controller action that accepts JSON data from an AJAX request. When validation fails, the developer wants to return the validation errors to the client in a format that can be easily processed by JavaScript. Which approach is most appropriate?
Select an answer first - 32
A social media application has a registration form where users choose a username. The username must be unique across the entire user base. The team wants to provide immediate feedback to the user as they type, without submitting the entire form, but also wants to ensure the check is performed securely on the server. Which approach should be used?
Select an answer first - 33
An MVC application has a Booking model with CheckInDate and CheckOutDate properties. The business rule is that CheckOutDate must be later than CheckInDate. The developer also needs to ensure that CheckInDate is not in the past. Which approach correctly implements both rules with appropriate validation error messages?
Select an answer first - 34
Which of the following is a common way to extract validation errors from ModelState for a JSON response?
Select an answer first - 35
A project management application has a form for creating a new task. The task model has a Title property that is required and must be between 5 and 100 characters. The team wants to enforce this rule using data annotations. Which combination of attributes should be applied to the Title property?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CASENET” is a trademark of its owner, used for identification only.