Examkin

Soru

Zorluk: KolayApplication and Software Vulnerabilities

A software developer is designing a web application search feature that queries a back-end database using user-supplied input. Which of the following software development practices is the most effective method to prevent SQL injection vulnerabilities in this application?

  1. Utilizing parameterized queries and prepared statementsCevap
  2. B
    Applying HTML entity encoding to output before rendering it in the user's browser
  3. C
    Configuring network firewall rules to filter HTTP traffic on web server port 80
  4. D
    Enforcing multi-factor authentication for administrative database logins

Cevap

Utilizing parameterized queries and prepared statements is the most effective method to prevent SQL injection vulnerabilities.
Utilizing parameterized queries and prepared statements ensures that the database engine treats user input strictly as data parameters rather than executable SQL commands, effectively neutralizing injection attempts.

Adım Adım Çözüm

1
Identify the core vulnerability mechanism
SQL injection occurs when malicious user input alters the intended database query logic.
Understanding how untrusted data interacts with database execution helps determine the appropriate security control.
2
Evaluate secure coding techniques for database access
Prepared statements handle user input separately from the SQL statement parameters, ensuring the database engine treats input strictly as data variables rather than executable code.
This structural separation ensures input cannot manipulate the database command structure regardless of content.

Anahtar Kavram

SQL Injection Prevention via Parameterized Queries
Bu soruyu puanla

Konular

Application and Software Vulnerabilities

Bu konudan daha fazla soru