A developer is writing a script that takes user input and constructs a database query. The script is used in a security operations tool. Which secure coding practice should the developer apply to prevent SQL injection?

Use a stored procedure without parameters

Validate input against a whitelist of allowed characters

Escape all single quotes in the input

Certified Cybersecurity Operations Analyst

Domain 1Objective 3

Development and Deployment CCOA Practice Questions (Page 8)

Part of the Domain 1: Technology Essentials domain, which accounts for 25% of the CCOA exam. ISACA does not publish an official question count, but from its 240-minute exam (~95–160 total, ~24–40 in this domain), expect 8–13 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

11concepts

25%of the exam

Questions 36–36

36application · medium
A developer is writing a script that takes user input and constructs a database query. The script is used in a security operations tool. Which secure coding practice should the developer apply to prevent SQL injection?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CCOA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CCOA” is a trademark of its owner, used for identification only.

Development and Deployment CCOA Practice Questions (Page 8)

Questions 36–36

A developer is writing a script that takes user input and constructs a database query. The script is used in a security operations tool. Which secure coding practice should the developer apply to prevent SQL injection?

Keep studying — Domain 1: Technology Essentials