ExpertMedium1 markMultiple Choice
CPA · Question 72 · Area II: Security
A company uses 'Input Validation' on its web forms. Which attack does this primarily prevent?
A company uses 'Input Validation' on its web forms. Which attack does this primarily prevent?
Answer options:
A.
Phishing
B.
SQL Injection (SQLi) and Cross-Site Scripting (XSS)
C.
DDoS
D.
Man-in-the-Middle
How to approach this question
Input Validation = Checking what the user types. Injection = Typing bad code.
Full Answer
B.SQL Injection (SQLi) and Cross-Site Scripting (XSS)✓ Correct
B
Input validation ensures that data entered by users meets expected formats. This prevents attackers from injecting malicious code (like SQL commands or JavaScript) into the application.
Common mistakes
Thinking validation stops network attacks like DDoS.
Practice the full CPA ISC Practice Exam 3
82 questions · hints · full answers · grading
More questions from this exam
Q01A CPA is advising a client who is migrating their legacy on-premise ERP system to a cloud-based s...MediumQ02During a review of a client's cloud governance structure, an auditor notes that the client uses a...MediumQ03An auditor is evaluating the 'Processing Integrity' principle for a financial institution's loan ...HardQ04A company uses a batch processing system to update inventory records overnight. The 'Grandfather-...HardQ05During a walkthrough of the change management process, an auditor observes that the 'Developer' r...Medium