Skip to content
Sharp

Security · interview question

A bug appears around sql injection prevention. What is the strongest first debugging move?

Multiple choiceMediumchapter-17-curatedpremiumsecuritysql-injection-prevention
python
connection.execute(
    "SELECT id FROM orders WHERE id = ?",
    (order_id,),
)
Choose one answer
Answer and explanation

Correct answer

C. Trace one concrete example, inspect the state transitions, and compare them to the intended rule before rewriting anything.

Why

That approach is reliable because it creates evidence. Query string interpolation is one of the oldest mistakes because it is easy to write and dangerous to ship.

Test yourself on Security

A free test with instant, explained results. No account needed.

Start free test
All Security questions →