350-701 Question 24

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose BD1

  Correct Answers are B and D

• Chose BD1

  B and D are correct

• 6

  B. Incorporate contextual output encoding/escaping D. Run untrusted HTML input through an HTML sanitization engine. Cross-site scripting (XSS) is a type of security vulnerability that allows an attacker to inject malicious code into a web page viewed by other users. To prevent XSS attacks, it's important to properly handle user input and output on the server-side. Incorporating contextual output encoding/escaping is an important preventive measure because it ensures that any user input that is included in the output of a web page is properly encoded and cannot be executed as code. This makes it difficult for an attacker to inject malicious code into the web page. Running untrusted HTML input through an HTML sanitization engine is another important preventive measure because it ensures that any malicious code is removed from the input before it is processed by the server. This also makes it difficult for an attacker to inject malicious code into the web page.