Exam CS0-003 topic 1 question 71 discussion

To remediate the vulnerability where a penetration tester was able to retrieve user credentials by submitting data to a form in a web application, the recommended action is: C. Performing input validation before allowing submission Explanation: Input validation is a critical security measure to prevent various types of web application attacks, including SQL injection, cross-site scripting (XSS), and data manipulation. It helps ensure that user inputs are sanitized and do not contain malicious or unexpected data.

C) input validation A, B, and D are all reasonable options. But the specific vulnerability involves the unauthorized submission of data into a web application. For this specific vulnerability, the solution is to validate inputs so it won't take just anything.

Correct This indicates a vulnerability related to improper input validation or lack of input sanitization on the web application. Input validation is a critical security measure to prevent various types of attacks, including SQL injection, cross-site scripting (XSS), and other injection attacks.