Multiple choice technology security

Which of the following is NOT recommended for securing Web Applications against malicious users?

  1. Filtering data with a default deny regular expression

  2. Running the application with the least privilege necessary

  3. Client side data validation

  4. Retrieving data from database using pre-compiled stored procedures
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Client-side validation can be bypassed by manipulating requests or disabling JavaScript. Security controls must enforce rules on the server where attackers cannot tamper with them. Options A (default-deny filtering), B (least privilege), and D (stored procedures) are valid security practices.

Keep practicing — related questions