Exam SY0-701 topic 1 question 64 discussion

Actual exam question from CompTIA's SY0-701

Question #: 64
Topic #: 1

An organization recently updated its security policy to include the following statement:
Regular expressions are included in source code to remove special characters such as $, |, ;. &, `, and ? from variables set by forms in a web application.
Which of the following best explains the security technique the organization adopted by making this addition to the policy?

A. Identify embedded keys
B. Code debugging
C. Input validation
D. Static code analysis

Show Suggested Answer

Suggested Answer: C 🗳️

by 123456789User at June 1, 2024, 6:32 p.m.

Comments

Submit Cancel

123456789User

Highly Voted 11 months, 1 week ago

Selected Answer: C

Input validation is the process of analyzing inputs and disallowing those which are considered unsuitable. Ie: Only allowing accepted inputs based on specific criteria

upvoted 16 times

...

dbrowndiver

Highly Voted 7 months ago

Selected Answer: C

As it pertains to this Scenario Application: -Removing Special Characters: The use of regular expressions to strip special characters from form variables is a method of input validation. By removing potentially dangerous characters, the application minimizes the risk of executing unintended commands or code. -Security Enhancement: Input validation helps ensure that only expected and safe input is processed, thereby protecting the application from malicious attacks that exploit unvalidated input. The policy directly describes a practice used to validate and sanitize user input, which is the essence of input validation. This technique is crucial for maintaining the security of web applications by preventing injection-based attacks.

upvoted 5 times

...