Exam CISA All QuestionsBrowse all questions from this exam
Question 182

What is the BEST control to address SQL injection vulnerabilities?

    Correct Answer: B

    The best control to address SQL injection vulnerabilities is input validation. SQL injection occurs when an attacker is able to insert or manipulate SQL queries, typically through user input fields. By validating and sanitizing this input, you can ensure that only safe and expected data is processed, thus preventing malicious SQL commands from being executed.

Discussion
SwallowsOption: B

SQL injection is a technique used by attackers to inject malicious SQL code into database queries, resulting in unauthorized access to databases and information leakage. This vulnerability occurs when input data is not properly validated.

ChangwhaOption: B

B. Input validation