Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Salesforce DEX-450 Exam - Topic 12 Question 88 Discussion

Posted by Huey on Apr 30, 2024 at 11:21 AM

Assuming that name is a String obtained by an tag on a Visualforce page, which two SOQL queries performed are safe from SOQL injection? Choose 2 answers

A)

B)

C)

D)

Suggested Answer: C

Get Premium DEX-450 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
41 comments · newest first
SI
Sina 11 months ago
Wait, how can we be sure these are safe?
NO
Nobuko 11 months ago
C looks risky to me.
FE
Felix 12 months ago
Not so sure about B, though.
LA
Layla 12 months ago
Definitely agree with A!
AD
Adelle 1 year ago
I think A and B are safe from SOQL injection.
EM
Emmett 1 year ago
I’m a bit confused about the differences between the options. I hope I can remember the examples we went over!
WE
Weldon 1 year ago
I practiced a similar question, and I feel like option B might be risky.
BE
Bernardine 1 year ago
I think options with bind variables are usually safe from injection. Maybe A and C?
ME
Merissa 1 year ago
I remember we discussed SOQL injection in class, but I’m not sure which queries are safe.
LA
Launa 1 year ago
This is a good opportunity to demonstrate my knowledge of SOQL injection prevention. I'll carefully consider each query and select the appropriate options.
JO
Josefa 1 year ago
Option A looks promising, but I want to double-check the other options as well to make sure I don't miss anything.
GI
Giovanna 1 year ago
Hmm, I'm a bit unsure about this one. I'll need to review my knowledge of SOQL injection to make sure I choose the right answers.
AR
Ardella 1 year ago
This looks like a tricky SOQL injection question. I'll need to carefully analyze each option to determine which ones are safe.
RA
Raelene 1 year ago
I think I know the answer, but I'll go through each option methodically to confirm my understanding.
IL
Ilda 1 year ago
Okay, let's see. I'm pretty sure this is a Data transform rule type, since we're copying data from one order to another.
TA
Tawny 1 year ago
Okay, let's see. The Diagnostic System Host, Remote Procedure Call, and Security Center all sound like important components that I wouldn't want to mess with. I'm going to go with WLAN AutoConfig as the one that can be changed or disabled.
MA
Marvel 1 year ago
I'm a bit unsure about the difference between "many databases" and "separate databases" in the options. I'll need to double-check my understanding there.
KR
Krissy 1 year ago
Hmm, I'm not sure about this one. I'll need to think it through carefully.
MA
Marva 1 year ago
I remember practicing a question like this where `tx.origin` was discussed, but I feel like `msg.sender` is more common for getting the initiator.
ER
Erasmo 1 year ago
Hey, at least they didn't ask about SOQL injection on a Visualforce page made with Comic Sans. That would just be the icing on the cake of this security nightmare!
CA
Cassandra 1 year ago
B and C, no doubt. Anything that tries to sneak in user input directly is just begging for a security breach. It's like inviting a hacker to a party - not a good idea!
WE
Wendell 1 year ago
↳ replying to Cassandra
Always better to be safe than sorry when it comes to preventing SOQL injection.
CH
Christiane 1 year ago
↳ replying to Cassandra
Exactly, we need to be cautious with user input to avoid any security risks.
CA
Carin 1 year ago
↳ replying to Cassandra
I agree, Option C also keeps user input at bay, making it secure.
MA
Maynard 1 year ago
↳ replying to Cassandra
Option B is definitely safe, it doesn't allow any user input to interfere.
TE
Terrilyn 2 years ago
I'm going with B and C. Can't be too careful with SOQL these days, especially when dealing with user input. Gotta keep those databases safe and sound, you know?
PE
Peggy 1 year ago
↳ replying to Terrilyn
Absolutely. It's always better to take precautions to ensure data security.
MA
Maile 1 year ago
↳ replying to Terrilyn
Definitely. Better to be safe than sorry when it comes to SOQL injection.
SH
Sharika 1 year ago
↳ replying to Terrilyn
Yeah, I agree. It's important to protect the database from any potential vulnerabilities.
LA
Lashaunda 1 year ago
↳ replying to Terrilyn
User 3: Keeping those databases safe is crucial.
SH
Shawn 1 year ago
↳ replying to Terrilyn
User 2: Yeah, can't be too careful with user input.
DE
Devorah 1 year ago
↳ replying to Terrilyn
User 1: I think B and C are the safe queries.
VI
Vivan 2 years ago
↳ replying to Terrilyn
I think B and C are the safest choices too. Can never be too careful with user input.
NE
Nell 2 years ago
Definitely B and C. Anything that uses string concatenation like A and D is just asking for trouble. Not today, SOQL injection!
LE
Leah 2 years ago
I think B and C are the safest options here. Using a SOQL query with a bind variable like that is the way to go to avoid injection attacks.
LE
Leatha 2 years ago
I'm not sure about Option B and Option D. They seem to directly concatenate the input which can lead to SOQL injection.
CH
Chantay 2 years ago
I agree with you, Haley. Option A and Option C use binding variables which help prevent SOQL injection.
HA
Haley 2 years ago
I think Option A and Option C are safe from SOQL injection.
MA
Martina 2 years ago
Can you explain why you think that?
KA
Katie 2 years ago
I disagree, I believe options B and D are the safe ones.
MA
Martina 2 years ago
I think options A and C are safe from SOQL injection.
0/2000 characters

Save Cancel