Multiple choice technology security

Which of the following is NOT recommended for securing Web Applications against malicious users?

  1. Filtering data with a default deny regular expression

  2. Running the application with the least privilege necessary

  3. Client side data validation

  4. Retrieving data from database using pre-compiled stored procedures
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Client-side validation can be easily bypassed by attackers using browser developer tools, proxy tools, or direct API calls. Security controls must be implemented on the server side where they cannot be manipulated by the client.

Keep practicing — related questions