CISA Exam QuestionsBrowse all questions from this exam

CISA Exam - Question 182


What is the BEST control to address SQL injection vulnerabilities?

Show Answer
Correct Answer: B

The best control to address SQL injection vulnerabilities is input validation. SQL injection occurs when an attacker is able to insert or manipulate SQL queries, typically through user input fields. By validating and sanitizing this input, you can ensure that only safe and expected data is processed, thus preventing malicious SQL commands from being executed.

Discussion

2 comments
Sign in to comment
ChangwhaOption: B
Jul 16, 2023

B. Input validation

SwallowsOption: B
Jul 13, 2024

SQL injection is a technique used by attackers to inject malicious SQL code into database queries, resulting in unauthorized access to databases and information leakage. This vulnerability occurs when input data is not properly validated.