Exam 312-50v13 Topic 1 Question 479 Discussion

Actual exam question for ECCouncil's 312-50v13 exam
Question #: 479
Topic #: 1
You are a security analyst at Sentinel Cyber Group, monitoring the web portal of Aspen Valley Bank in Salt Lake City, Utah. During log review, you notice repeated attempts by attackers to inject malicious strings into the login fields. However, despite these attempts, the application executes queries safely without altering their logic, since user inputs are kept separate from the SQL statements and bound as fixed values before execution. Based on the observed defense mechanism, which SQL injection countermeasure is the application employing?

Suggested Answer: C Vote an answer

Keeping user inputs separate from SQL logic and binding them as fixed values before execution is the core principle of parameterized queries or prepared statements, which effectively prevent SQL injection.

by Hogan at Sep 21, 2026, 07:01 AM

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

0
0
0
10