CyberRevision
Continue revision → ← Subjects
CEH v13 · 20 official modules

All 5,000 CEH questions.

Search original practice content, filter by EC-Council module or exam domain, and open any question in revision mode.

0 answered overall

Showing 3,801–3,850 of 5,000 matching questions

50 per page
3801
Module 15 · Foundation Domain 1 · Background SQL injection Unanswered

During an authorized retail-company assessment (RET-LAB-M15-3801), which statement most accurately defines "SQL injection"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  4. Injection of database syntax through untrusted input that an application treats as part of a query.
Practice →
3802
Module 15 · Foundation Domain 1 · Background SQL injection Unanswered

During a hospital incident-response exercise (HLT-SOC-M15-3802), which statement most accurately defines "SQL injection"?

View answer choices
  1. Injection of database syntax through untrusted input that an application treats as part of a query.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. A staged model describing adversary activity from reconnaissance through actions on objectives.
  4. The confidentiality, integrity, and availability objectives used to reason about information security.
Practice →
3803
Module 15 · Foundation Domain 1 · Background SQL injection Unanswered

During a university cyber-range engagement (EDU-RANGE-M15-3803), which statement most accurately defines "SQL injection"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. Injection of database syntax through untrusted input that an application treats as part of a query.
  3. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  4. A staged model describing adversary activity from reconnaissance through actions on objectives.
Practice →
3804
Module 15 · Applied Domain 1 · Background SQL injection Unanswered

During a financial-services purple-team test (FIN-PT-M15-3804), which statement most accurately defines "SQL injection"?

View answer choices
  1. A staged model describing adversary activity from reconnaissance through actions on objectives.
  2. The confidentiality, integrity, and availability objectives used to reason about information security.
  3. Injection of database syntax through untrusted input that an application treats as part of a query.
  4. A knowledge base that organizes adversary tactics and techniques from observed behavior.
Practice →
3805
Module 15 · Applied Domain 1 · Background SQL injection Unanswered

During a cloud startup security audit (CLD-AUDIT-M15-3805), which statement most accurately defines "SQL injection"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  4. Injection of database syntax through untrusted input that an application treats as part of a query.
Practice →
3806
Module 15 · Applied Domain 1 · Background SQL injection Unanswered

During a government risk-validation project (GOV-RISK-M15-3806), which statement most accurately defines "SQL injection"?

View answer choices
  1. A staged model describing adversary activity from reconnaissance through actions on objectives.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. Injection of database syntax through untrusted input that an application treats as part of a query.
  4. The confidentiality, integrity, and availability objectives used to reason about information security.
Practice →
3807
Module 15 · Applied Domain 1 · Background SQL injection Unanswered

During an e-commerce application review (ECOM-WEB-M15-3807), which statement most accurately defines "SQL injection"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. Injection of database syntax through untrusted input that an application treats as part of a query.
  4. A staged model describing adversary activity from reconnaissance through actions on objectives.
Practice →
3808
Module 15 · Advanced Domain 1 · Background SQL injection Unanswered

During a manufacturing and OT security review (MFG-OT-M15-3808), which statement most accurately defines "SQL injection"?

View answer choices
  1. Injection of database syntax through untrusted input that an application treats as part of a query.
  2. The confidentiality, integrity, and availability objectives used to reason about information security.
  3. A staged model describing adversary activity from reconnaissance through actions on objectives.
  4. A knowledge base that organizes adversary tactics and techniques from observed behavior.
Practice →
3809
Module 15 · Advanced Domain 1 · Background SQL injection Unanswered

During a mobile-services penetration test (MOB-TEST-M15-3809), which statement most accurately defines "SQL injection"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  4. Injection of database syntax through untrusted input that an application treats as part of a query.
Practice →
3810
Module 15 · Advanced Domain 1 · Background SQL injection Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M15-3810), which statement most accurately defines "SQL injection"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. Injection of database syntax through untrusted input that an application treats as part of a query.
  3. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  4. A staged model describing adversary activity from reconnaissance through actions on objectives.
Practice →
3811
Module 15 · Foundation Domain 1 · Background SQL injection Unanswered

During an authorized retail-company assessment (RET-LAB-M15-3811), which risk is most directly associated with "SQL injection"?

View answer choices
  1. An attacker may read, modify, or delete data and sometimes reach operating-system functions.
  2. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  3. Unmapped detections can leave important adversary techniques without coverage.
  4. A control focused on only one objective can leave the other security objectives exposed.
Practice →
3812
Module 15 · Foundation Domain 1 · Background SQL injection Unanswered

During a hospital incident-response exercise (HLT-SOC-M15-3812), which risk is most directly associated with "SQL injection"?

View answer choices
  1. A control focused on only one objective can leave the other security objectives exposed.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  4. An attacker may read, modify, or delete data and sometimes reach operating-system functions.
Practice →
3813
Module 15 · Foundation Domain 1 · Background SQL injection Unanswered

During a university cyber-range engagement (EDU-RANGE-M15-3813), which risk is most directly associated with "SQL injection"?

View answer choices
  1. An attacker may read, modify, or delete data and sometimes reach operating-system functions.
  2. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  3. A control focused on only one objective can leave the other security objectives exposed.
  4. Unmapped detections can leave important adversary techniques without coverage.
Practice →
3814
Module 15 · Applied Domain 1 · Background SQL injection Unanswered

During a financial-services purple-team test (FIN-PT-M15-3814), which risk is most directly associated with "SQL injection"?

View answer choices
  1. A control focused on only one objective can leave the other security objectives exposed.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. An attacker may read, modify, or delete data and sometimes reach operating-system functions.
  4. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
Practice →
3815
Module 15 · Applied Domain 1 · Background SQL injection Unanswered

During a cloud startup security audit (CLD-AUDIT-M15-3815), which risk is most directly associated with "SQL injection"?

View answer choices
  1. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. An attacker may read, modify, or delete data and sometimes reach operating-system functions.
  4. A control focused on only one objective can leave the other security objectives exposed.
Practice →
3816
Module 15 · Applied Domain 1 · Background SQL injection Unanswered

During a government risk-validation project (GOV-RISK-M15-3816), which risk is most directly associated with "SQL injection"?

View answer choices
  1. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. A control focused on only one objective can leave the other security objectives exposed.
  4. An attacker may read, modify, or delete data and sometimes reach operating-system functions.
Practice →
3817
Module 15 · Applied Domain 1 · Background SQL injection Unanswered

During an e-commerce application review (ECOM-WEB-M15-3817), which risk is most directly associated with "SQL injection"?

View answer choices
  1. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  2. A control focused on only one objective can leave the other security objectives exposed.
  3. An attacker may read, modify, or delete data and sometimes reach operating-system functions.
  4. Unmapped detections can leave important adversary techniques without coverage.
Practice →
3818
Module 15 · Advanced Domain 1 · Background SQL injection Unanswered

During a manufacturing and OT security review (MFG-OT-M15-3818), which risk is most directly associated with "SQL injection"?

View answer choices
  1. A control focused on only one objective can leave the other security objectives exposed.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. An attacker may read, modify, or delete data and sometimes reach operating-system functions.
  4. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
Practice →
3819
Module 15 · Advanced Domain 1 · Background SQL injection Unanswered

During a mobile-services penetration test (MOB-TEST-M15-3819), which risk is most directly associated with "SQL injection"?

View answer choices
  1. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. An attacker may read, modify, or delete data and sometimes reach operating-system functions.
  4. A control focused on only one objective can leave the other security objectives exposed.
Practice →
3820
Module 15 · Advanced Domain 1 · Background SQL injection Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M15-3820), which risk is most directly associated with "SQL injection"?

View answer choices
  1. A control focused on only one objective can leave the other security objectives exposed.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  4. An attacker may read, modify, or delete data and sometimes reach operating-system functions.
Practice →
3821
Module 15 · Foundation Domain 1 · Background SQL injection Unanswered

During an authorized retail-company assessment (RET-LAB-M15-3821), which action most directly controls the risk related to "SQL injection"?

View answer choices
  1. Place preventive and detective controls across multiple stages of the chain.
  2. Map each asset and threat to confidentiality, integrity, and availability requirements.
  3. Use parameterized queries, strict input handling, least-privilege database accounts, and testing.
  4. Map controls and detections to relevant ATT&CK techniques and validate coverage.
Practice →
3822
Module 15 · Foundation Domain 1 · Background SQL injection Unanswered

During a hospital incident-response exercise (HLT-SOC-M15-3822), which action most directly controls the risk related to "SQL injection"?

View answer choices
  1. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  2. Use parameterized queries, strict input handling, least-privilege database accounts, and testing.
  3. Map each asset and threat to confidentiality, integrity, and availability requirements.
  4. Place preventive and detective controls across multiple stages of the chain.
Practice →
3823
Module 15 · Foundation Domain 1 · Background SQL injection Unanswered

During a university cyber-range engagement (EDU-RANGE-M15-3823), which action most directly controls the risk related to "SQL injection"?

View answer choices
  1. Use parameterized queries, strict input handling, least-privilege database accounts, and testing.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Place preventive and detective controls across multiple stages of the chain.
  4. Map each asset and threat to confidentiality, integrity, and availability requirements.
Practice →
3824
Module 15 · Applied Domain 1 · Background SQL injection Unanswered

During a financial-services purple-team test (FIN-PT-M15-3824), which action most directly controls the risk related to "SQL injection"?

View answer choices
  1. Place preventive and detective controls across multiple stages of the chain.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Map each asset and threat to confidentiality, integrity, and availability requirements.
  4. Use parameterized queries, strict input handling, least-privilege database accounts, and testing.
Practice →
3825
Module 15 · Applied Domain 1 · Background SQL injection Unanswered

During a cloud startup security audit (CLD-AUDIT-M15-3825), which action most directly controls the risk related to "SQL injection"?

View answer choices
  1. Use parameterized queries, strict input handling, least-privilege database accounts, and testing.
  2. Place preventive and detective controls across multiple stages of the chain.
  3. Map each asset and threat to confidentiality, integrity, and availability requirements.
  4. Map controls and detections to relevant ATT&CK techniques and validate coverage.
Practice →
3826
Module 15 · Applied Domain 1 · Background SQL injection Unanswered

During a government risk-validation project (GOV-RISK-M15-3826), which action most directly controls the risk related to "SQL injection"?

View answer choices
  1. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  2. Use parameterized queries, strict input handling, least-privilege database accounts, and testing.
  3. Map each asset and threat to confidentiality, integrity, and availability requirements.
  4. Place preventive and detective controls across multiple stages of the chain.
Practice →
3827
Module 15 · Applied Domain 1 · Background SQL injection Unanswered

During an e-commerce application review (ECOM-WEB-M15-3827), which action most directly controls the risk related to "SQL injection"?

View answer choices
  1. Use parameterized queries, strict input handling, least-privilege database accounts, and testing.
  2. Place preventive and detective controls across multiple stages of the chain.
  3. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  4. Map each asset and threat to confidentiality, integrity, and availability requirements.
Practice →
3828
Module 15 · Advanced Domain 1 · Background SQL injection Unanswered

During a manufacturing and OT security review (MFG-OT-M15-3828), which action most directly controls the risk related to "SQL injection"?

View answer choices
  1. Map each asset and threat to confidentiality, integrity, and availability requirements.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Place preventive and detective controls across multiple stages of the chain.
  4. Use parameterized queries, strict input handling, least-privilege database accounts, and testing.
Practice →
3829
Module 15 · Advanced Domain 1 · Background SQL injection Unanswered

During a mobile-services penetration test (MOB-TEST-M15-3829), which action most directly controls the risk related to "SQL injection"?

View answer choices
  1. Use parameterized queries, strict input handling, least-privilege database accounts, and testing.
  2. Map each asset and threat to confidentiality, integrity, and availability requirements.
  3. Place preventive and detective controls across multiple stages of the chain.
  4. Map controls and detections to relevant ATT&CK techniques and validate coverage.
Practice →
3830
Module 15 · Advanced Domain 1 · Background SQL injection Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M15-3830), which action most directly controls the risk related to "SQL injection"?

View answer choices
  1. Use parameterized queries, strict input handling, least-privilege database accounts, and testing.
  2. Place preventive and detective controls across multiple stages of the chain.
  3. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  4. Map each asset and threat to confidentiality, integrity, and availability requirements.
Practice →
3831
Module 15 · Foundation Domain 1 · Background SQL injection Unanswered

During an authorized retail-company assessment (RET-LAB-M15-3831), which evidence best supports an assessment of "SQL injection"?

View answer choices
  1. A detection matrix showing covered and uncovered ATT&CK techniques.
  2. Application and database logs showing input altering query structure.
  3. A risk register linking assets to CIA impact ratings.
  4. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
Practice →
3832
Module 15 · Foundation Domain 1 · Background SQL injection Unanswered

During a hospital incident-response exercise (HLT-SOC-M15-3832), which evidence best supports an assessment of "SQL injection"?

View answer choices
  1. Application and database logs showing input altering query structure.
  2. A risk register linking assets to CIA impact ratings.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. A detection matrix showing covered and uncovered ATT&CK techniques.
Practice →
3833
Module 15 · Foundation Domain 1 · Background SQL injection Unanswered

During a university cyber-range engagement (EDU-RANGE-M15-3833), which evidence best supports an assessment of "SQL injection"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  3. A detection matrix showing covered and uncovered ATT&CK techniques.
  4. Application and database logs showing input altering query structure.
Practice →
3834
Module 15 · Applied Domain 1 · Background SQL injection Unanswered

During a financial-services purple-team test (FIN-PT-M15-3834), which evidence best supports an assessment of "SQL injection"?

View answer choices
  1. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. Application and database logs showing input altering query structure.
  4. A risk register linking assets to CIA impact ratings.
Practice →
3835
Module 15 · Applied Domain 1 · Background SQL injection Unanswered

During a cloud startup security audit (CLD-AUDIT-M15-3835), which evidence best supports an assessment of "SQL injection"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. Application and database logs showing input altering query structure.
  4. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
Practice →
3836
Module 15 · Applied Domain 1 · Background SQL injection Unanswered

During a government risk-validation project (GOV-RISK-M15-3836), which evidence best supports an assessment of "SQL injection"?

View answer choices
  1. Application and database logs showing input altering query structure.
  2. A risk register linking assets to CIA impact ratings.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. A detection matrix showing covered and uncovered ATT&CK techniques.
Practice →
3837
Module 15 · Applied Domain 1 · Background SQL injection Unanswered

During an e-commerce application review (ECOM-WEB-M15-3837), which evidence best supports an assessment of "SQL injection"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. Application and database logs showing input altering query structure.
Practice →
3838
Module 15 · Advanced Domain 1 · Background SQL injection Unanswered

During a manufacturing and OT security review (MFG-OT-M15-3838), which evidence best supports an assessment of "SQL injection"?

View answer choices
  1. Application and database logs showing input altering query structure.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. A risk register linking assets to CIA impact ratings.
Practice →
3839
Module 15 · Advanced Domain 1 · Background SQL injection Unanswered

During a mobile-services penetration test (MOB-TEST-M15-3839), which evidence best supports an assessment of "SQL injection"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. Application and database logs showing input altering query structure.
  3. A detection matrix showing covered and uncovered ATT&CK techniques.
  4. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
Practice →
3840
Module 15 · Advanced Domain 1 · Background SQL injection Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M15-3840), which evidence best supports an assessment of "SQL injection"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  3. A detection matrix showing covered and uncovered ATT&CK techniques.
  4. Application and database logs showing input altering query structure.
Practice →
3841
Module 15 · Foundation Domain 3 · Security parameterized database query Unanswered

During an authorized retail-company assessment (RET-LAB-M15-3841), which statement most accurately defines "parameterized database query"?

View answer choices
  1. A query in which code structure is separated from untrusted parameter values.
  2. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
  3. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
  4. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
Practice →
3842
Module 15 · Foundation Domain 3 · Security parameterized database query Unanswered

During a hospital incident-response exercise (HLT-SOC-M15-3842), which statement most accurately defines "parameterized database query"?

View answer choices
  1. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
  2. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
  3. A query in which code structure is separated from untrusted parameter values.
  4. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
Practice →
3843
Module 15 · Foundation Domain 3 · Security parameterized database query Unanswered

During a university cyber-range engagement (EDU-RANGE-M15-3843), which statement most accurately defines "parameterized database query"?

View answer choices
  1. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
  2. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
  3. A query in which code structure is separated from untrusted parameter values.
  4. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
Practice →
3844
Module 15 · Applied Domain 3 · Security parameterized database query Unanswered

During a financial-services purple-team test (FIN-PT-M15-3844), which statement most accurately defines "parameterized database query"?

View answer choices
  1. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
  2. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
  3. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
  4. A query in which code structure is separated from untrusted parameter values.
Practice →
3845
Module 15 · Applied Domain 3 · Security parameterized database query Unanswered

During a cloud startup security audit (CLD-AUDIT-M15-3845), which statement most accurately defines "parameterized database query"?

View answer choices
  1. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
  2. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
  3. A query in which code structure is separated from untrusted parameter values.
  4. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
Practice →
3846
Module 15 · Applied Domain 3 · Security parameterized database query Unanswered

During a government risk-validation project (GOV-RISK-M15-3846), which statement most accurately defines "parameterized database query"?

View answer choices
  1. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
  2. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
  3. A query in which code structure is separated from untrusted parameter values.
  4. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
Practice →
3847
Module 15 · Applied Domain 3 · Security parameterized database query Unanswered

During an e-commerce application review (ECOM-WEB-M15-3847), which statement most accurately defines "parameterized database query"?

View answer choices
  1. A query in which code structure is separated from untrusted parameter values.
  2. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
  3. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
  4. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
Practice →
3848
Module 15 · Advanced Domain 3 · Security parameterized database query Unanswered

During a manufacturing and OT security review (MFG-OT-M15-3848), which statement most accurately defines "parameterized database query"?

View answer choices
  1. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
  2. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
  3. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
  4. A query in which code structure is separated from untrusted parameter values.
Practice →
3849
Module 15 · Advanced Domain 3 · Security parameterized database query Unanswered

During a mobile-services penetration test (MOB-TEST-M15-3849), which statement most accurately defines "parameterized database query"?

View answer choices
  1. A query in which code structure is separated from untrusted parameter values.
  2. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
  3. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
  4. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
Practice →
3850
Module 15 · Advanced Domain 3 · Security parameterized database query Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M15-3850), which statement most accurately defines "parameterized database query"?

View answer choices
  1. A query in which code structure is separated from untrusted parameter values.
  2. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
  3. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
  4. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
Practice →