Study. uk . com
  1. Home
  2. All questions
  3. Question 143

CompTIA Security+ study material · question 143 of 611

An application's database account is granted read access only to the two tables it needs. What does this achieve against SQL injection?

  1. It removes the need for parameterised queries
  2. It makes the flaw a false positive
  3. It prevents injection from succeeding
  4. It limits what a successful injection can reach
Show the answer

Answer: D. It limits what a successful injection can reach

Least privilege is an impact control. It does not stop the injection, only what the attacker can do with it.

Source: OWASP SQL Injection Prevention Cheat Sheet (OWASP) — OWASP SQL Injection Prevention Cheat Sheet › Additional Defenses

Challenge yourself on this topic → Study as cards