nerdexam
(ISC)2

CSSLP · Question #291

You work as a Security Manager for Tech Perfect Inc. You want to save all the data from the SQL injection attack, which can read sensitive data from the database and modify database data using some co

Sign in or unlock CSSLP to reveal the answer and full explanation for question #291. The question stem and answer options stay visible for context.

Secure Software Implementation

Question

You work as a Security Manager for Tech Perfect Inc. You want to save all the data from the SQL injection attack, which can read sensitive data from the database and modify database data using some commands, such as Insert, Update, and Delete. Which of the following tasks will you perform? Each correct answer represents a complete solution. Choose three.

Options

  • AApply maximum number of database permissions.
  • BUse an encapsulated library for accessing databases.
  • CCreate parameterized stored procedures.
  • DCreate parameterized queries by using bound and typed parameters.

Unlock CSSLP to see the answer

You've previewed enough free CSSLP questions. Unlock CSSLP for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#SQL Injection#Parameterized Queries#Secure Coding#Database Security
Full CSSLP Practice