ExamGecko
Question list
Search
Search

Related questions

Question 86 - CISA discussion

Report
Export

What is the BEST control to address SQL injection vulnerabilities?

A.
Unicode translation
Answers
A.
Unicode translation
B.
Secure Sockets Layer (SSL) encryption
Answers
B.
Secure Sockets Layer (SSL) encryption
C.
Input validation
Answers
C.
Input validation
D.
Digital signatures
Answers
D.
Digital signatures
Suggested answer: C

Explanation:

Input validation is the best control to address SQL injection vulnerabilities, because it can prevent malicious users from entering SQL commands or statements into input fields that are intended for data entry, such as usernames or passwords. SQL injection is a technique that exploits a security vulnerability in an application's software by inserting SQL code into a query string that can execute commands on a database server.Unicode translation, SSL encryption, and digital signatures are not effective controls against SQL injection, because they do not prevent or detect SQL code injection into input fields.Reference:CISA Review Manual (Digital Version), Chapter 5, Section 5.4.2

asked 18/09/2024
metodija durtanoski
41 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first