Engineering Interviews · interview question
Which of the following approaches is most secure when dynamically building SQL queries from user inputs?
Multiple choiceEasychapter-20-curatedpremiumengineering-interviewscode-review-spotting-bugs
Answer and explanation
Correct answer
B. Using PreparedStatement with parameterized queries
Why
Using PreparedStatement with parameterized queries prevents SQL injection by separating SQL logic from data. This makes it difficult for attackers to manipulate the structure of the query.
Test yourself on Engineering Interviews
A free test with instant, explained results. No account needed.
More Engineering Interviews questions
- In the context of JVM memory architecture, what is the primary role of the 'stack'?
- Why is it important to first outline a high-level design before diving into coding during a system design interview?
- During a live coding interview, why is it important to verbalize your thought process?
- What does the 'Result' component in the STAR framework mainly aim to achieve?
- Why is it crucial to agree on an algorithm before writing code in a live coding interview?
- In a code review, which type of bug is most critical to address immediately?