Practice question 464 of 498 · medium
A search filter compares document group strings with group strings sent by the browser. Users can submit arbitrary group names. What should the architect correct?
Choose the single best answer.
Show the answer and explanation
✓ Correct answer
- Derive allowed principal information from the authenticated trusted context and prevent filter bypass
A security filter is string-based and depends on trusted application context. More results increase potential exposure, a client string is not authentication, and at-rest encryption does not fix forged permission context.
Read and review here, or open the app to practise and save your results on this device.
Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.