Question

What is 'SQL injection' and which of the following is the most effective prevention technique?

Q: Answer-What is 'SQL injection' and which of the following is the most effective prevention technique?

SQL injection occurs when user input is directly concatenated into SQL queries without sanitization. Example entering OR 11 in a login field may bypass authentication. Parameterized queries separate SQL code from data user input is treated as a literal string, never as executable SQL. Additional controls that can be used are stored procedures, input validation whitelist, WAF Web Application Firewall and principle of least privilege on DB accounts.

A A virus that corrupts SQL databases by replicating itself — prevented by antivirus software

B An attack that inserts malicious SQL code into input fields — most effectively prevented by parameterized queries

C A DDoS attack targeting SQL servers denying essential services — prevented by installing firewalls and antivirus

D Unauthorized copying of SQL database files — prevented by file encryption

E An attack exploiting unpatched SQL server software — prevented by regular updates only

Practice Next

More IT Networking Questions

"Parity bits" are used for which of the following purposes?
Which is correct with respect to the size of the data types in C?
Which SQL keyword is used to modify existing rows in a table?
Which network layer protocol is used to report errors and diagnose network problems?
A company needs to create 10 subnets from the network 192.168.1.0/24. What is the minimum subnet mask required to accommodate this, and how many usable hos...
Consider the following three functions. f1 = 100n f2 = nlogn f3 = n√n Which one of the following options arranges the functions in the increasing order of ...
What is the purpose of the "if __name__ == '__main__':" statement in a Python script?
Write through technique is used in which memory for data updating
Which concurrency control technique uses read and write locks to ensure consistency?
The result of SQL select statement is?

Relevant for Exams:

Central Bank of India SO

Hey! Ask a query

What is 'SQL injection' and which of the following is the most effective prevention technique?

Detailed Solution

More IT Networking Questions

Relevant for Exams:

Hey! Ask a query

Please Register/Login