Which input validation approach is MOST robust?
A CISSP practice question covering Domain 8: Software Development Security. Try answering before reading the explanation below.
Show options & answer
Why "Whitelisting allowed input patterns and rejecting everything else" is the right answer
Whitelist (allow-list) validation is more robust because attackers can construct novel payloads that evade blacklists. Client-side validation is bypassable. Upstream trust assumes a perfect defense-in-depth chain.
Take the full CISSP practice test
120 questions, instant explanations, study-video links on every miss. No account.