Fundamentals of InfoSecintermediate
Select ALL practices that reduce the risks of SQL injection or its impact.
Answer
Use parameterized queries and prepared statements, Validate input and check expected data types, Limit database privileges used by the application
Explanation
### Why this is right
- Parameterized queries separate command structure from supplied values.
- Input validation and type checks reject values that do not fit the application's expectations.
- Limited database privileges reduce what an attacker could do if another control fails.
### The concept
Defense should include both prevention and impact reduction. Prepared statements are the primary defense taught. Validation adds a layer, while least privilege limits database access. Error messages should not disclose unnecessary database details.
### The other options
- **Expose detailed database errors to every user**: this can reveal internal details useful to an attacker.
- **Rely only on blocking a few special characters**: filtering is not a dependable substitute for prepared statements.
### Terms
- **Parameterized query**: a query that supplies values separately from its SQL structure.
- **Database privilege**: permission to perform actions on database objects.
### Remember
Separate code from data, validate input, and limit the application's permissions.
Related Questions
- Explain why computer security is described as a process rather than a product. Include the roles of technology, people, and environment.(intermediate)
- Select ALL items the review identifies as possible security risks or losses.(intermediate)
- Arrange these broad security activities in a sensible cycle, beginning with identifying what needs protection.(intermediate)
- A security product can replace the continuing work of managing people, technology, and the operating environment.(intermediate)
- Which statement best captures the course review’s view of computer security?(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free