Oracle Exam 1Z0-819 Topic 9 Question 63 Discussion

Actual exam question for Oracle's 1Z0-819 exam

Question #: 63
Topic #: 9

[All 1Z0-819 Questions]

Consider this method declaration:

A) ''SET SESSION AUTHORIZATION '' + user

B) ''SET SESSION AUTHORIZATION '' + stmt.enquoteIdentifier(user)

Is A or B the correct replacement for and why?

AA, because it sends exactly the value of user provided by the calling code.

BB, because enquoting values provided by the calling code prevents SQL injection.

CA and B are functionally equivalent.

DA, because it is unnecessary to enclose identifiers in quotes.

EB, because all values provided by the calling code should be enquoted.

Show Suggested Answer

Suggested Answer: A

by Pamella at May 27, 2023, 03:39 AM

Limited Time Offer

25%

Off

Get Premium 1Z0-819 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Gerald

1 months ago

Enquoting the user value? That's a no-brainer. B is the answer, folks. Unless you want your code to be the next big security breach.

upvoted 0 times

...

Ty

1 months ago

I don't know about you, but I'm not taking any chances. B is the clear winner here. Gotta keep those nasty SQL injections at bay.

upvoted 0 times

...

Dalene

1 months ago

Haha, A? Really? Might as well just hand the database over to the hackers. B is the way to go, no doubt.

upvoted 0 times

Phillip

17 days ago

A, because it sends exactly the value of user provided by the calling code.

upvoted 0 times

...

Bok

1 months ago

Hmm, I'm gonna have to go with B on this one. Gotta play it safe and enclose those values, you know?

upvoted 0 times

Ryann

17 days ago

User 1: I think B is the correct replacement because it prevents SQL injection.

upvoted 0 times

...

Ethan

1 months ago

C'mon, it's obviously B. Who would use A and risk SQL injection? That's just asking for trouble.

upvoted 0 times

Krystina

21 days ago

User 3: I agree with Krystina, B is the safer option to prevent SQL injection.

upvoted 0 times

...

Nathalie

28 days ago

User 2: No way, it's definitely B. A is risky for SQL injection.

upvoted 0 times

...

Reita

1 months ago

User 1: I think A is the correct replacement.

upvoted 0 times

...

Lisbeth

2 months ago

I think B is the correct answer. Enquoting the user value helps prevent SQL injection, which is important for security.

upvoted 0 times

Francoise

2 months ago

C) A and B are functionally equivalent.

upvoted 0 times

...

Pearline

2 months ago

B, because enquoting values provided by the calling code prevents SQL injection.

upvoted 0 times

...

Gerald

3 months ago

I'm not sure, but I think A might be better because it sends exactly the value of user provided.

upvoted 0 times

...

Gracia

3 months ago

I agree with Gladys, B is definitely the safer option.

upvoted 0 times

...

Gladys

3 months ago

I think B is the correct replacement because it prevents SQL injection.

upvoted 0 times

...