CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ61

VerifiedSoftware Development Security

In software development, which type of query should developers use to prevent Structured Query Language (SQL) injection?

Explanation

Parameterized queries separate SQL command structure from supplied values, causing untrusted input to be handled as data instead of SQL code.

Community Discussion

No comments yet. Be the first to start the discussion!