A web-based application known to be susceptible to attacks is now under review by a senior developer. The organization would like to ensure this application Is less susceptible to injection attacks specifically, What strategy will work BEST for the organization's situation?

Question

Sivagami Narayanan · Accepted Answer

Whitelist input and encode or escape output before it is processed for rendering.

Sivagami Narayanan · Answer

Do not store sensitive unencrypted data on the back end.

Sivagami Narayanan · Answer

Limit privileged access or hard-coding logon credentials,

Sivagami Narayanan · Answer

Store sensitive data in a buffer that retains data in operating system (OS) cache or memory.

Question list

List of questions

Question 1

(1)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 976 - CISSP discussion

Suggested answer: B

0 comments