What does “White List” data validation means?
-
Data is validated against a list of values that are known to be valid
-
Data is validated against a list of values that are known to be invalid
-
Both of the above
-
None of the above
To understand what "White List" data validation means, the user needs to know the basics of data validation and filtering.
"White List" data validation refers to the process of validating data against a list of values that are known to be valid. This means that the data is filtered and compared against a pre-defined list of acceptable values. If the data matches any of the values on the list, it is considered valid. If it does not match any of the values on the list, it is considered invalid.
Option A is the correct answer, as it accurately describes what "White List" data validation means.
Option B is incorrect, as it describes the opposite of what "White List" data validation means.
Option C is incorrect because it includes option B, which is incorrect.
Option D is also incorrect because "White List" data validation is a real concept and option A accurately describes it.
The Answer is: A
Correct answer: Data is validated against a list of values that are known to be valid.
"White list" (allow-list) validation is the security best practice of defining exactly what input IS acceptable (valid characters, formats, or values) and rejecting everything else by default. This is considered stronger than "black list" validation, which tries to enumerate known-bad values — an inherently incomplete approach since attackers can always find a bad value that wasn't anticipated.
The second option describes black-list validation, which is the opposite approach, and "both of the above"/"none of the above" are wrong since white-listing has one specific, well-defined meaning (validating against known-good values).