Application Vulnerabilities Practice Questions

One solved question, so you can see how these are marked

A development manager is selecting the primary control for a service that builds database queries from customer search terms. Which control is BEST?

Use parameterized queries or prepared statements and validate input against the expected schema.

Parameterized queries keep data separate from SQL commands, while validation limits unexpected input. A firewall, encryption, and error suppression can reduce exposure, but none directly prevents injection in application query construction.

Every question in the set below is marked like this. The answers stay hidden until you pick one.