Question

What is 'SQL injection' and which of the following is the most effective prevention technique?

Q: Answer-What is 'SQL injection' and which of the following is the most effective prevention technique?

SQL injection occurs when user input is directly concatenated into SQL queries without sanitization. Example entering OR 11 in a login field may bypass authentication. Parameterized queries separate SQL code from data user input is treated as a literal string, never as executable SQL. Additional controls that can be used are stored procedures, input validation whitelist, WAF Web Application Firewall and principle of least privilege on DB accounts.

A A virus that corrupts SQL databases by replicating itself — prevented by antivirus software

B An attack that inserts malicious SQL code into input fields — most effectively prevented by parameterized queries

C A DDoS attack targeting SQL servers denying essential services — prevented by installing firewalls and antivirus

D Unauthorized copying of SQL database files — prevented by file encryption

E An attack exploiting unpatched SQL server software — prevented by regular updates only

Practice Next

More IT Networking Questions

Virtual memory allows for the efficient management of:
What is the purpose of a Storage Area Network (SAN)?
What is the advantage of using incremental backups over full backups?
Which of the following is NOT a method for handling deadlocks?
Which cryptographic system uses two different keys for encryption and decryption?
Which layer of the OSI model deals with electrical, mechanical, and physical aspects of data transmission?
Which type of power plant uses mirrors or lenses to concentrate sunlight and generate electricity?
A host has IPv4 address 192.168.10.70/26. It communicates with 192.168.10.126. Which statement is correct?
Which OWASP Top 10 vulnerability involves exploiting the lack of proper input validation and output encoding to inject malicious scripts into web pages vie...
What is a hybrid cloud?

Relevant for Exams:

Central Bank of India SO

Hey! Ask a query

🎓

Think You're Ready for RBI Grade B?

RBI Grade B 2026 Phase 1 Memory Based Paper

200 Questions with Detailed Solutions
Section-wise Coverage (GA, English, Quant & Reasoning)

Download Now 100% Free PDF

What is 'SQL injection' and which of the following is the most effective prevention technique?

Detailed Solution

More IT Networking Questions

Relevant for Exams:

Hey! Ask a query

Please Register/Login

RBI Grade B 2026 Phase 1 Memory Based Paper