A security architect wants to prevent security impacts from input into data fields, such as the following: 'AND 1=1# Which of the following would best accomplish this objective?

The correct answer is B. APIs. The root of SQL injection (e.g., ’ AND 1=1#) is unsafe string concatenation in application code. A robust secure-coding standard mandates parameterized queries (or stored procedures), strict input validation/whitelisting, and escaping of any user-supplied data. By embedding these

Submitted by mateo_ar· Mar 6, 2026Security Engineering

Question

A security architect wants to prevent security impacts from input into data fields, such as the following:

'AND 1=1# Which of the following would best accomplish this objective?

Options

AAPIs
BAPIs
CBase64 encoding
DSandboxing

How the community answered

(37 responses)

A
3% (1)
B
86% (32)
C
8% (3)
D
3% (1)

Explanation

The root of SQL injection (e.g., ’ AND 1=1#) is unsafe string concatenation in application code. A robust secure-coding standard mandates parameterized queries (or stored procedures), strict input validation/whitelisting, and escaping of any user-supplied data. By embedding these practices into your development guidelines and enforcing them through code reviews and automated scans, you eliminate SQL injection and similar input-based attacks at the source.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice