A security analyst has discovered that a web application is vulnerable to SQL injection attacks. Which control should the analyst recommend implementing to mitigate this vulnerability?
Parameterized queries should be used to mitigate SQL injection attacks. This technique ensures that SQL code and data are separated, preventing attackers from injecting malicious SQL code that could alter database queries. Other methods, like input validation, are important but do not address the root cause of SQL injection in the direct manner that parameterized queries do.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What are parameterized queries and how do they work?
Open an interactive chat with Bash
Why is input validation not enough to prevent SQL injection?
Open an interactive chat with Bash
What are some other methods to prevent SQL injection besides parameterized queries?