
EC-CouncilCertified Application Security Engineer (.NET)
Domain 3Objective 2
Input Validation for Web Forms CASENET Practice Questions (Page 6)
Part of the Secure Coding: Input Validation domain, which makes up ~11% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–9 in this domain), expect 2–2 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)
34questions here
7free pages
8concepts
Questions 26–30
- 26
Which ASP.NET validation control is used when you need to implement complex validation logic that cannot be expressed with built-in validators?
Select an answer first - 27
A company is building a file upload feature for a web application. The requirements are: 1) Users can upload images only (JPEG, PNG, GIF). 2) The maximum file size is 5 MB. 3) The application must prevent malicious files from being uploaded. The team is debating between checking the file extension and checking the file content. Which approach should be implemented?
Select an answer first - 28
Which of the following is an important validation rule for file uploads to prevent malicious files?
Select an answer first - 29
What is the primary purpose of output encoding when rendering user input in a web page?
Select an answer first - 30
A web application has a form that allows users to enter a date of birth. The requirement is that the user must be at least 18 years old. The team is using a CustomValidator. Which code snippet should be used in the server-side validation function?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CASENET” is a trademark of its owner, used for identification only.