GIAC Exam GCIH Topic 5 Question 7 Discussion

Actual exam question for GIAC's GCIH exam

Question #: 7
Topic #: 5

[All GCIH Questions]

Which of the following can be used as a countermeasure against the SQL injection attack?

Each correct answer represents a complete solution. Choose two.

Amysql_real_escape_string()

Bsession_regenerate_id()

Cmysql_escape_string()

DPrepared statement

Show Suggested Answer

Suggested Answer: C

by Raymon at Nov 21, 2023, 07:11 PM

Limited Time Offer

25%

Off

Get Premium GCIH Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ernie

5 days ago

I'm pretty sure option D is the way to go - Prepared statements are the gold standard for preventing SQL injection. The other options might help in other ways, but they don't directly address the injection vulnerability.

upvoted 0 times

...

Becky

22 days ago

I'm not sure about C) mysql_escape_string(). I think it's not as secure as the other options mentioned.

upvoted 0 times

...

Grover

23 days ago

I agree with Anika. Those two options are commonly recommended to prevent SQL injection attacks.

upvoted 0 times

...

Anika

26 days ago

I think A) mysql_real_escape_string() and D) Prepared statement can be used as countermeasures.

upvoted 0 times

...