Question

What is 'SQL injection' and which of the following is the most effective prevention technique?

Q: Answer-What is 'SQL injection' and which of the following is the most effective prevention technique?

SQL injection occurs when user input is directly concatenated into SQL queries without sanitization. Example entering OR 11 in a login field may bypass authentication. Parameterized queries separate SQL code from data user input is treated as a literal string, never as executable SQL. Additional controls that can be used are stored procedures, input validation whitelist, WAF Web Application Firewall and principle of least privilege on DB accounts.

A A virus that corrupts SQL databases by replicating itself — prevented by antivirus software

B An attack that inserts malicious SQL code into input fields — most effectively prevented by parameterized queries

C A DDoS attack targeting SQL servers denying essential services — prevented by installing firewalls and antivirus

D Unauthorized copying of SQL database files — prevented by file encryption

E An attack exploiting unpatched SQL server software — prevented by regular updates only

Practice Next

More IT Networking Questions

In the context of backups, what is a retention policy?
Which of the following is the primary fuel used in natural gas power plants?
Which ICMP message indicates “Fragmentation Needed”?
Which component of an ER diagram represents an entity?
Write through technique is used in which memory for data updating
What does the complexity class P refer to?
The SI unit for measuring pressure is:
Which property of a transaction is known as atomicity?
In TCP/IP, the "three-way handshake" is used to establish a connection. What is the correct sequence of messages?
Which searching algorithm requires the data to be sorted beforehand?

Relevant for Exams:

Central Bank of India SO

Hey! Ask a query

What is 'SQL injection' and which of the following is the most effective prevention technique?

Detailed Solution

More IT Networking Questions

Relevant for Exams:

Hey! Ask a query

Please Register/Login