1. Home
2. All questions
3. Question 140

CompTIA Security+ study material · question 140 of 611

Which technique is the primary defence against SQL injection, and why does it work?

• Vulnerabilities
• Attacks

1. Parameterised queries, because the database learns the query structure before it sees the data
2. A web application firewall, because injection patterns are blocked
3. Escaping input, because dangerous characters are neutralised
4. Least privilege, because the account cannot read other tables

Challenge yourself on this topic → Study as cards