📢 Too many exams? Don’t know which one suits you best? Book Your Free Expert 👉 call Now!


    Question

    SQL Injection can be prevented by all

    EXCEPT:
    A Using parameterized queries / prepared statements Correct Answer Incorrect Answer
    B Escaping user input correctly Correct Answer Incorrect Answer
    C Using stored procedures without parameterization Correct Answer Incorrect Answer
    D Input validation and least privilege on DB account Correct Answer Incorrect Answer
    E Using ORM frameworks that parameterize queries Correct Answer Incorrect Answer

    Solution

    Stored procedures can help but if they concatenate inputs into SQL internally they remain vulnerable. Parameterized queries and proper escaping, input validation, and least privilege are strong defenses.

    Practice Next
    ask-question