Assuming that name is a String obtained by an tag on a Visualforce page, which two SOQL queries performed are safe from SOQL injection? Choose 2 answers
A)

B)

C)

D)

Suggested Answer: C
Get Premium DEX-450 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
41 comments · newest first
SI
Sina
11 months ago
Wait, how can we be sure these are safe?
NO
Nobuko
11 months ago
C looks risky to me.
FE
Felix
12 months ago
Not so sure about B, though.
LA
Layla
12 months ago
Definitely agree with A!
AD
Adelle
1 year ago
I think A and B are safe from SOQL injection.
EM
Emmett
1 year ago
I’m a bit confused about the differences between the options. I hope I can remember the examples we went over!
WE
Weldon
1 year ago
I practiced a similar question, and I feel like option B might be risky.
BE
Bernardine
1 year ago
I think options with bind variables are usually safe from injection. Maybe A and C?
ME
Merissa
1 year ago
I remember we discussed SOQL injection in class, but I’m not sure which queries are safe.
LA
Launa
1 year ago
This is a good opportunity to demonstrate my knowledge of SOQL injection prevention. I'll carefully consider each query and select the appropriate options.
JO
Josefa
1 year ago
Option A looks promising, but I want to double-check the other options as well to make sure I don't miss anything.
GI
Giovanna
1 year ago
Hmm, I'm a bit unsure about this one. I'll need to review my knowledge of SOQL injection to make sure I choose the right answers.
AR
Ardella
1 year ago
This looks like a tricky SOQL injection question. I'll need to carefully analyze each option to determine which ones are safe.
RA
Raelene
1 year ago
I think I know the answer, but I'll go through each option methodically to confirm my understanding.
IL
Ilda
1 year ago
Okay, let's see. I'm pretty sure this is a Data transform rule type, since we're copying data from one order to another.
TA
Tawny
1 year ago
Okay, let's see. The Diagnostic System Host, Remote Procedure Call, and Security Center all sound like important components that I wouldn't want to mess with. I'm going to go with WLAN AutoConfig as the one that can be changed or disabled.
MA
Marvel
1 year ago
I'm a bit unsure about the difference between "many databases" and "separate databases" in the options. I'll need to double-check my understanding there.
KR
Krissy
1 year ago
Hmm, I'm not sure about this one. I'll need to think it through carefully.
MA
Marva
1 year ago
I remember practicing a question like this where `tx.origin` was discussed, but I feel like `msg.sender` is more common for getting the initiator.
ER
Erasmo
1 year ago
Hey, at least they didn't ask about SOQL injection on a Visualforce page made with Comic Sans. That would just be the icing on the cake of this security nightmare!
CA
Cassandra
1 year ago
B and C, no doubt. Anything that tries to sneak in user input directly is just begging for a security breach. It's like inviting a hacker to a party - not a good idea!
WE
Wendell
1 year ago
Always better to be safe than sorry when it comes to preventing SOQL injection.
CH
Christiane
1 year ago
Exactly, we need to be cautious with user input to avoid any security risks.
CA
Carin
1 year ago
I agree, Option C also keeps user input at bay, making it secure.
MA
Maynard
1 year ago
Option B is definitely safe, it doesn't allow any user input to interfere.
TE
Terrilyn
2 years ago
I'm going with B and C. Can't be too careful with SOQL these days, especially when dealing with user input. Gotta keep those databases safe and sound, you know?
PE
Peggy
1 year ago
Absolutely. It's always better to take precautions to ensure data security.
MA
Maile
1 year ago
Definitely. Better to be safe than sorry when it comes to SOQL injection.
SH
Sharika
1 year ago
Yeah, I agree. It's important to protect the database from any potential vulnerabilities.
LA
Lashaunda
1 year ago
User 3: Keeping those databases safe is crucial.
SH
Shawn
1 year ago
User 2: Yeah, can't be too careful with user input.
DE
Devorah
1 year ago
User 1: I think B and C are the safe queries.
VI
Vivan
2 years ago
I think B and C are the safest choices too. Can never be too careful with user input.
NE
Nell
2 years ago
Definitely B and C. Anything that uses string concatenation like A and D is just asking for trouble. Not today, SOQL injection!
LE
Leah
2 years ago
I think B and C are the safest options here. Using a SOQL query with a bind variable like that is the way to go to avoid injection attacks.
LE
Leatha
2 years ago
I'm not sure about Option B and Option D. They seem to directly concatenate the input which can lead to SOQL injection.
CH
Chantay
2 years ago
I agree with you, Haley. Option A and Option C use binding variables which help prevent SOQL injection.
HA
Haley
2 years ago
I think Option A and Option C are safe from SOQL injection.
MA
Martina
2 years ago
Can you explain why you think that?
KA
Katie
2 years ago
I disagree, I believe options B and D are the safe ones.
MA
Martina
2 years ago
I think options A and C are safe from SOQL injection.