Question

What is 'SQL injection' and which of the following is the most effective prevention technique?

Q: Answer-What is 'SQL injection' and which of the following is the most effective prevention technique?

SQL injection occurs when user input is directly concatenated into SQL queries without sanitization. Example entering OR 11 in a login field may bypass authentication. Parameterized queries separate SQL code from data user input is treated as a literal string, never as executable SQL. Additional controls that can be used are stored procedures, input validation whitelist, WAF Web Application Firewall and principle of least privilege on DB accounts.

A A virus that corrupts SQL databases by replicating itself — prevented by antivirus software

B An attack that inserts malicious SQL code into input fields — most effectively prevented by parameterized queries

C A DDoS attack targeting SQL servers denying essential services — prevented by installing firewalls and antivirus

D Unauthorized copying of SQL database files — prevented by file encryption

E An attack exploiting unpatched SQL server software — prevented by regular updates only

Practice Next

More IT Networking Questions

What does the "Projection" operation in relational algebra do?
What is the concept of "paging" in memory management?
What is the main advantage of Hadoop's HDFS (Hadoop Distributed File System)?
ICMP is primarily used for __________
Standard C library functions will always invoke a system call when executed from a single-threaded process in a UNIX/Linux operating system?
Which layer of the OSI model is responsible for logical addressing (e.g., IP addresses) and routing?
What is the primary responsibility of the "Controller" in the MVC architecture?
A B-tree of order 4 is built from scratch by 10 successive insertions. What is the maximum number of node splitting operations that may take place?
Which component in the CPU holds the data to be operated on, performs calculations, and stores the results?
Which function is used to get the version of python?

Relevant for Exams:

Central Bank of India SO

Hey! Ask a query

🎓

Think You're Ready for RBI Grade B?

RBI Grade B 2026 Phase 1 Memory Based Paper

200 Questions with Detailed Solutions
Section-wise Coverage (GA, English, Quant & Reasoning)

Download Now 100% Free PDF

What is 'SQL injection' and which of the following is the most effective prevention technique?

Detailed Solution

More IT Networking Questions

Relevant for Exams:

Hey! Ask a query

Please Register/Login

RBI Grade B 2026 Phase 1 Memory Based Paper