Exam 312-50v13 Topic 1 Question 479 Discussion
Actual exam question for ECCouncil's 312-50v13 exam
Question #: 479
Topic #: 1
Question #: 479
Topic #: 1
You are a security analyst at Sentinel Cyber Group, monitoring the web portal of Aspen Valley Bank in Salt Lake City, Utah. During log review, you notice repeated attempts by attackers to inject malicious strings into the login fields. However, despite these attempts, the application executes queries safely without altering their logic, since user inputs are kept separate from the SQL statements and bound as fixed values before execution. Based on the observed defense mechanism, which SQL injection countermeasure is the application employing?
Suggested Answer: C Vote an answer
Keeping user inputs separate from SQL logic and binding them as fixed values before execution is the core principle of parameterized queries or prepared statements, which effectively prevent SQL injection.
by Hogan at Sep 21, 2026, 07:01 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).