MENU
Which of the following is the BEST way to protect against Structured Query language (SQL) injection?
Suggested Answer: D
Get Premium CISSP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
CA
Cathrine
11 months ago
I agree with D, but can we really trust stored procedures alone?
MI
Mitsue
12 months ago
I thought HTML restrictions were enough, but I guess not!
ST
Stephanie
12 months ago
Wait, isn't B just a typo? What’s "Ratfrict"?
GR
Gracia
12 months ago
A is important too, but not the best option.
AL
Alfred
1 year ago
Definitely D, stored procedures are the way to go!
GE
Gennie
1 year ago
I vaguely recall something about restricting HTML source code, but it doesn't seem directly related to SQL injection. I wonder if that's a red herring.
HU
Hui
1 year ago
I'm not entirely sure, but I feel like boundary checking might help too. It seems like a good practice for input validation.
ST
Stevie
1 year ago
I remember we discussed SQL injection in class, and I think using stored procedures was emphasized as a strong defense.
LU
Luther
1 year ago
I think we had a practice question about this, and the answer was related to stored procedures. But I'm a bit confused about the other options.
JA
Jaleesa
1 year ago
This is a tricky one. I think I'll need to review the details of each load balancing method to decide which one is most effective in this scenario.
DY
Dyan
1 year ago
I'm a little confused by the wording of this question. Is it asking about the configuration settings that determine which knowledge bases are searched, or the actual knowledge bases themselves? I'll have to read it over a few times to make sure I understand what they're really asking.
TR
Trinidad
1 year ago
I think the answer might be C, DLP for data in use, since it deals with how data is actively manipulated in applications.