(ISC)2
CCSP · Question #877
Which practice helps prevent SQL injection vulnerabilities?
The correct answer is B. Using parameterized queries or prepared statements. Parameterized queries ensure user inputs are treated as data, not code. This prevents injection. Disabling errors may hide issues but doesn't fix them. Obfuscation and encryption don't address injection risks.
Submitted by suresh_in· Apr 18, 2026Cloud Application Security
Question
Which practice helps prevent SQL injection vulnerabilities?
Options
- ADisabling error messages in production
- BUsing parameterized queries or prepared statements
- CObfuscating code
- DEncrypting the database
How the community answered
(36 responses)- A6% (2)
- B92% (33)
- C3% (1)
Explanation
Parameterized queries ensure user inputs are treated as data, not code. This prevents injection. Disabling errors may hide issues but doesn't fix them. Obfuscation and encryption don't address injection risks.
Topics
#SQL Injection#Application Security#Parameterized Queries#Input Validation
Community Discussion
No community discussion yet for this question.