OWASP Vulnerabilities · interview question
How do prepared statements help mitigate SQL Injection attacks in Java?
Multiple choiceMediumchapter-17-curatedpremiumowasp-vulnerabilitiescross-site-scripting-xss
Answer and explanation
Correct answer
A. By separating SQL logic from data inputs
Why
Prepared statements separate SQL logic from data inputs, meaning user inputs are treated strictly as data, not as executable code. This prevents attackers from injecting malicious SQL code.
Test yourself on OWASP Vulnerabilities
A free test with instant, explained results. No account needed.
More OWASP Vulnerabilities questions
- How would you explain a potential limitation of using only CSRF tokens for preventing CSRF attacks in an interview?
- In a Spring Security filter chain, what is the purpose of filters?
- What role does the 'Signature' play in a JWT?
- Why does the 'signature' in a JWT matter in this design?
- How would you explain a key strategy Java web applications use to protect against Stored XSS attacks in an interview?
- Which of the following best describes a CSRF attack?