Multiple choice technology security

Which of the following is NOT recommended for securing Web Applications against malicious users?

  1. Filtering data with a default deny regular expression

  2. Running the application with the least privilege necessary

  3. Client side data validation

  4. Retrieving data from database using pre-compiled stored procedures
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Client-side validation is NOT a security control because it can be easily bypassed by disabling JavaScript, modifying the request, or using tools like curl. Secure applications must validate on the server side. Options A (default-deny regex), B (least privilege), and D (stored procedures) ARE recommended practices for securing web applications.

Keep practicing — related questions