Study. uk . com
  1. Home
  2. All questions
  3. Question 466

CISSP study material · question 466 of 500

A team lists input validation and output escaping as its primary defences against injection. What does OWASP name as the preferred option?

  1. A web application firewall tuned to the application's traffic.
  2. A safe API that avoids the interpreter entirely or offers a parameterised interface.
  3. Input validation performed on both client and server.
  4. Encoding every value before it is stored in the database.
Show the answer

Answer: B. A safe API that avoids the interpreter entirely or offers a parameterised interface.

OWASP says the preferred option is to use a safe API which avoids the interpreter entirely, provides a parameterised interface, or migrates to object relational mapping tools.

Source: OWASP Top 10 A05:2025 (OWASP) — OWASP Top 10:2025 A05 Injection > How to prevent

Challenge yourself on this topic → Study as cards