Multiple choice technology security

The application is receiving input from an external source. Which of the following external sources can be considered safe?

  1. Shell environment variables

  2. Data received via encrypted network channels

  3. argv[0] can only have either null or program name

  4. no external input must be trusted
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

In secure programming, a fundamental principle is that NO external input should be blindly trusted. Even encrypted network data can be malicious or corrupted. Shell environment variables can be manipulated by attackers. argv[0] is not guaranteed to be just the program name - it can be set to arbitrary values by the calling process. Only option D correctly states that no external input must be trusted without validation.

Keep practicing — related questions