Multiple choice technology databases

Identify two methods for immunizing PL/SQL code against SQL injection attacks ?

  1. Use subprograms as pasrt of packages instead of stand-alone parameters

  2. Use dynamic SQL’s constructed using concatenation of input values.

  3. Use bind arguments

  4. Usage of the NOT NULL constraint in PL/SQL code can degrade performance
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Using bind arguments is a primary defense against SQL injection because it separates SQL logic from data values, preventing malicious input from altering SQL structure. Option A is incorrect because package subprograms alone don't prevent injection. Option B is incorrect because concatenation actually increases vulnerability. Option D about NOT NULL constraint is irrelevant to SQL injection security.

Keep practicing — related questions