Exam 98-364 topic 1 question 79 discussion

first answer is wrong! Must be www.contoso.com Not a client computer!!!

The first line is fine, it is a client becouse script(ex. on website) should verify data input.

The client should be the FIRST LINE of defense (not the only). "Implement multiple layers of validation. Precautions you take against casually malicious users may be ineffective against determined attackers. A better practice is to validate input in the user interface and at all subsequent points where it crosses a trust boundary. For example, data validation in a client-side application can prevent simple script injection. However, if the next tier assumes that its input has already been validated, any malicious user who can bypass a client can have unrestricted access to a system." https://docs.microsoft.com/en-us/sql/relational-databases/security/sql-injection?view=sql-server-ver15 https://docs.microsoft.com/en-us/sql/relational-databases/security/sql-injection?view=sql-server-ver15

Also, Internet Explorer? Who uses IE? What percentage of PC users have used IE in the past decade? lol You'd think MS would at least update the question to address and promote Edge, since that is their new and improved web-browsing product.

I believe that the first line is IIS, but it might be aw an option of the client security to promote the client defense (which is completely wrong).

why the first line of defense against sql injection ? client