Multiple choice technology security

A SQL Injection vulnerability can be best mitigated by using:

  1. SSL/TLS Implementation

  2. URL/HTML Encoding

  3. Using parameterized queries

  4. Configuring web server to restrict directory listing

Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Parameterized queries separate SQL logic from data, preventing injection by treating user input as literal values not executable code. SSL/TLS (A) encrypts transmission but doesnt stop injection. URL/HTML encoding (B) mitigates XSS, not SQLi. Directory restrictions (D) address information disclosure, not injection. Parameterized queries (also called prepared statements) are the primary defense.