Multiple choice

What is SQL Injection?

  1. Using inline queries in a SqlCommand object

  2. Using Parameters to take inputs from users

  3. Injecting a SQL Statement as user input

  4. Installing a plugin to SQL Server Management Studio

Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

SQL Injection is a security vulnerability where an attacker inputs malicious SQL statements into entry fields, forcing the database to execute unintended commands. Using parameterized queries is actually a defense against SQL injection, not the vulnerability itself.

Keep practicing — related questions