What does “White List” data validation means?
-
Data is validated against a list of values that are known to be valid
-
Data is validated against a list of values that are known to be invalid
-
Both of the above
-
None of the above
Whitelist data validation means only accepting data that matches a pre-approved list of valid values. This approach is more secure than blacklist validation because it explicitly defines what is permitted rather than trying to block every possible bad input. Option B describes blacklist validation (checking against known invalid values), which is the opposite of whitelisting.
To answer this question, we need to understand the concept of "White List" data validation.
Option A) Data is validated against a list of values that are known to be valid - This option is correct. In "White List" data validation, data is checked against a predetermined list of values that are considered valid or allowed. If the data matches any value in the list, it is considered valid. This approach ensures that only known valid values are accepted, providing a higher level of security and preventing potential vulnerabilities.
Option B) Data is validated against a list of values that are known to be invalid - This option is incorrect. "White List" data validation does not involve checking against a list of known invalid values. The purpose of "White List" validation is to only accept values that are explicitly allowed or considered valid.
Option C) Both of the above - This option is incorrect. As explained above, "White List" data validation only checks against a list of known valid values, not known invalid values.
Option D) None of the above - This option is incorrect. The correct answer is option A, as "White List" data validation involves checking data against a list of known valid values.
The correct answer is option A. This option is correct because "White List" data validation means that data is validated against a list of values that are known to be valid.