The security team noticed that a few users of the company's website have been able to submit malformed data, exposing sensitive data stored in a database. The team wants to enhance the platform's security without impacting its usability. What security control should the security team implement?

Question

A.Upgrade the cloud infrastructure to improve data processing speed
B.Implement robust input validation mechanisms to validate all incoming data
C.Enable additional firewall rules to restrict access to the platform
D.Increase the number of login attempts before locking user accounts

Answer 1

The appropriate security control for the scenario described is:

B. Implement robust input validation mechanisms to validate all incoming data.

This approach helps ensure that all incoming data is properly checked for correctness and appropriateness before it is processed or stored, which helps prevent the submission of malformed or malicious data that could lead to vulnerabilities such as SQL injection or other types of attacks that could expose sensitive information. Implementing robust input validation is a critical step in enhancing application security without significantly impacting usability.