Multiple choice technology security

What does “White List” data validation means?

  1. Data is validated against a list of values that are known to be valid

  2. Data is validated against a list of values that are known to be invalid

  3. Both of the above

  4. None of the above

Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Whitelist validation (also called positive validation) checks input against a known list of valid values - anything not on the list is rejected. This is more secure than blacklist validation because you explicitly define what's allowed. Option B describes blacklist validation, which is weaker. Whitelist examples: allowing only alphanumeric characters, or only specific file extensions.