A Security Engineer Is Assisting a Developer with Input Validation

question 28

Multiple Choice

A security engineer is assisting a developer with input validation, and they are studying the following code block: The security engineer wants to ensure strong input validation is in place for customer-provided account identifiers. These identifiers are ten-digit numbers. The developer wants to ensure input validation is fast because a large number of people use the system. Which of the following would be the BEST advice for the security engineer to give to the developer?

• A) Replace code with Java-based type checks
• B) Parse input into an array
• C) Use regular expressions
• D) Canonicalize input into string objects before validation

---

Definitions:

Intraorganizational Bargaining

The process of negotiation and decision-making within a union or between unions to settle on common strategies or positions.

Political Institutions

Structures and systems of government and governance, including legislatures, courts, and the executive branch, which create, enforce, and interpret laws.

Federal Government

The national government of a federal country, which holds the sovereign authority and power over matters that pertain to the country as a whole, distinct from state or provincial governments.

Civil Service

The body of government employees who are employed on behalf of and who are responsible for the administration of the state, often excluding military and elected officials.