Point out the correct statement :
A. Parameterized data cannot be manipulated by a skilled and determined attacker
B. Procedure that constructs SQL statements should be reviewed for injection vulnerabilities
C. The primary form of SQL injection consists of indirect insertion of code
D. None of the mentioned
Answer:A
Point out the correct statement :
A. Parameterized data cannot be manipulated by a skilled and determined attacker B. Procedure that constructs SQL statements should be reviewed for injection vulnerabilities C. The primary form of SQL injection consists of indirect insertion of code D. None of the mentioned
Explanation:Any procedure that constructs SQL statements should be reviewed for injection vulnerabilities because SQL Server will execute all syntactically valid queries that it receives.