Exam 312-50v11 topic 1 question 357 discussion

Actual exam question from ECCouncil's 312-50v11

Question #: 357
Topic #: 1

CyberTech Inc. recently experienced SQL injection attacks on its official website. The company appointed Bob, a security professional, to build and incorporate defensive strategies against such attacks. Bob adopted a practice whereby only a list of entities such as the data type, range, size, and value, which have been approved for secured access, is accepted.
What is the defensive technique employed by Bob in the above scenario?

A. Whitelist validation
B. Output encoding
C. Blacklist validation
D. Enforce least privileges

Show Suggested Answer

Suggested Answer: A 🗳️

by Osen at Oct. 21, 2021, 6:30 a.m.

Comments

Submit Cancel

Daniel8660

8 months, 3 weeks ago

Selected Answer: A

Defenses in the Application - Input Validation Whitelist Validation, Whitelist validation is a best practice whereby only the list of entities (i.e., data type, range, size, value, etc.) that have been approved for secured access is accepted. Whitelist validation can also be termed as positive validation or inclusion. (P.2164/2148)

upvoted 3 times

...

Osen

1 year, 8 months ago

A correct.

upvoted 2 times

...