1Z0-908: MySQL 8.0 Database AdministratorDemo

Question

You want to protect your MySQL database from SQL injection attacks.

Which method would not accomplish this?

A installing and configuring the Connection Control plugin
B avoiding concatenation of SQL statements and user-supplied values in an application
C using stored procedures for any database access
D using PREPARED STATEMENTS

Explanation

The Connection Control plugin tracks failed connection attempts and delays responses after repeated failures, which deters brute-force login attacks. It does not separate untrusted application input from SQL commands and therefore does not prevent SQL injection. Prepared statements and avoiding SQL-string concatenation keep user-supplied values distinct from executable SQL.

Learn more

MySQL Reference Manual: Connection Control Plugins

1Z0-908: MySQL 8.0 Database AdministratorDemo

AstroTutor

Notes

Readiness

QuestionQ89

Community Discussion