πŸ“’ Too many exams? Don’t know which one suits you best? Book Your Free Expert πŸ‘‰ call Now!

  • google app store apple app store
  • βœ–

      Question

      SQL Injection can be prevented by all

      EXCEPT:
      A Using parameterized queries / prepared statements Correct Answer Incorrect Answer
      B Escaping user input correctly Correct Answer Incorrect Answer
      C Using stored procedures without parameterization Correct Answer Incorrect Answer
      D Input validation and least privilege on DB account Correct Answer Incorrect Answer
      E Using ORM frameworks that parameterize queries Correct Answer Incorrect Answer

      Solution

      Stored procedures can help but if they concatenate inputs into SQL internally they remain vulnerable. Parameterized queries and proper escaping, input validation, and least privilege are strong defenses.

      Practice Next
      ask-question