Which two protections ensure that the correct data is returned by the client? (Choose two.)
Which two protections ensure that the correct data is returned by the client? (Choose two.)
Protections that ensure the correct data is returned by the client typically involve checking the consistency and format of data submitted through forms. Form Field Consistency ensures that the form structure is not altered and that the data submitted adheres to set restrictions. Field Formats validate the type and length of user-submitted data to ensure they match the expected formats. These checks help ensure the integrity and correctness of the data returned by the client.
A & D are fine CSRF meaning CSRF form tagging check (https://docs.netscaler.com/en-us/citrix-adc/current-release/application-firewall/form-protections/cross-site-request-forgery-check.html) where data from web forms returned by users are checked.
B (Field Formats) should also be correct, since it validates users' forms input as well Field Formats: https://docs.citrix.com/en-us/citrix-adc/current-release/application-firewall/form-protections/field-formats-check.html Form Field Consistency Check: https://docs.citrix.com/en-us/citrix-adc/current-release/application-firewall/form-protections/form-field-consistency-check.html CSRF: https://docs.citrix.com/en-us/citrix-adc/current-release/application-firewall/form-protections/cross-site-request-forgery-check.html
Reference - https://docs.citrix.com/en-us/citrix-adc-secure-deployment.html See "Third Tier of Security."
A and B check the form of the input
The question is asking about data returned by the client. XSS and CSRF are with regard to preventing malicious data from being sent to the server rather than ensuring the correct data is returned by the client.
A. Form Field Consistency - This ensures that the client has not altered the structure of the web forms and that data submitted adheres to HTML restrictions for length and type. B. Field Formats - This validates the type and length of user-submitted data in web forms to ensure they are appropriate for the intended fields.