Question

What is 'SQL injection' and which of the following is the most effective prevention technique?

Q: Answer-What is 'SQL injection' and which of the following is the most effective prevention technique?

SQL injection occurs when user input is directly concatenated into SQL queries without sanitization. Example entering OR 11 in a login field may bypass authentication. Parameterized queries separate SQL code from data user input is treated as a literal string, never as executable SQL. Additional controls that can be used are stored procedures, input validation whitelist, WAF Web Application Firewall and principle of least privilege on DB accounts.

A A virus that corrupts SQL databases by replicating itself — prevented by antivirus software

B An attack that inserts malicious SQL code into input fields — most effectively prevented by parameterized queries

C A DDoS attack targeting SQL servers denying essential services — prevented by installing firewalls and antivirus

D Unauthorized copying of SQL database files — prevented by file encryption

E An attack exploiting unpatched SQL server software — prevented by regular updates only

Practice Next

More IT Networking Questions

What is a 'hash function' in cryptography and what property makes it suitable for password storage?
Which topology requires the most cabling, giving n(n-1)/2 connections for n nodes?
Hadoop is an open-source framework commonly used for processing and analyzing big data. What is the primary component of Hadoop responsible for distributed...
The CPU control unit typically generates control signals for various components within the CPU, including the:
What does HTML stand for in web technology?
Which network layer protocol is responsible for multicasting, where a packet is sent to multiple destinations simultaneously?
What is the primary purpose of virtual memory in a computer system?
What is the main advantage of Network Attached Storage (NAS) technology?
What is job scheduling in an operating system?
relation R(ABCD) has these dependencies {A → B, B → C,C → D} and it is decomposed into three relations R1(AB) , R2(BC), AND R3(CD). State true or false if ...

Relevant for Exams:

Central Bank of India SO

Hey! Ask a query

🎓

Think You're Ready for RBI Grade B?

RBI Grade B 2026 Phase 1 Memory Based Paper

200 Questions with Detailed Solutions
Section-wise Coverage (GA, English, Quant & Reasoning)

Download Now 100% Free PDF

What is 'SQL injection' and which of the following is the most effective prevention technique?

Detailed Solution

More IT Networking Questions

Relevant for Exams:

Hey! Ask a query

Please Register/Login

RBI Grade B 2026 Phase 1 Memory Based Paper