Oracle
1Z0-807 · Question #74
During a security audit, it is noted that your application is vulnerable to SQL Injection attacks. Which two in lions would you perform to address this vulnerability?
The correct answer is A. Use parameterized stored procedures with the embedded parameters. B. Add a text input validation filter to check user-supplied data. See the full explanation below for the reasoning.
Question
During a security audit, it is noted that your application is vulnerable to SQL Injection attacks. Which two in lions would you perform to address this vulnerability?
Options
- AUse parameterized stored procedures with the embedded parameters.
- BAdd a text input validation filter to check user-supplied data.
- CConfigure user permissions in the deployment descriptor.
- DConfigure security roles in the deployment descriptor.
- EDeploy the Internet facing nodes in a well defined demilitarized zone (DMZ) layer.
- FUse parameterized stored procedures with the principle of least privilege.
How the community answered
(26 responses)- A85% (22)
- C8% (2)
- D4% (1)
- F4% (1)
Community Discussion
No community discussion yet for this question.