Question 1Which of the following countermeasures help developers prevent applications from becoming vulnerable to SQL injection attacks? 1 pointDesign the code such that it traps and handles exceptions appropriately Allow entries that contain binary data, escape sequences, and comment characters Never use a prepared statement to create a parameterized query Construct dynamic SQL with concatenated input values 2.Question 2Which of the following practices helps developers defend against SQL injection attacks? 1 pointAlways construct dynamic SQL with concatenated input values Build Transact-SQL statements directly from user input Never implement multiple layers of validation Test the content of string variables and accept only expected values

8.Question 8Which of the following are coding techniques that can be used to prevent SQL injection attacks? Select three answers.1 pointInput validationInput sanitizationPublic key infrastructure (PKI)Prepared statements

You know that Injection vulnerabilities are one of the most critical vulnerabilities found ina web application. Explain how an Injection attack works and write a sample codeexplaining how SQL Injection vulnerability can be mitigated using Prepared Statements.

Which of the following is not a common technique used to prevent SQL injection attacks? Input validation Output encoding Prepared statements Session hijacking

Which of the following approaches is an effective way of protecting yourself against SQL injection?

Question 1Which of the following types of SQL injection attack is difficult to perform as the attacker needs to communicate with the server and determine the features of the database used by the web application? 1 pointBlind SQL injection In-band SQL injection Out-of-band SQL injection Inferential SQL injection 2.Question 2In which of the following attacks does an attacker pose a true or false question to a database to determine whether an application is vulnerable to SQL injection? 1 pointUnion SQL injection In-band SQL injection Blind SQL injection Error-based SQL injection