A developer is reviewing a Node.js codebase and finds a query built by string concatenation: `db.query('SELECT * FROM products WHERE name = "' + userInput + '"')`. The developer wants to explain the risk to a junior colleague. Which statement accurately describes the primary risk?

An attacker can inject additional SQL commands by crafting input that breaks out of the string quotes, potentially modifying or deleting data.

The query will fail with a syntax error if the user input contains a single quote, causing the application to crash.

The query will return incorrect results if the user input contains special characters like % or _.

The query will be slower because the database must parse the concatenated string at runtime.

LPI Web Development Essentials

Domain 5Objective 3

035.3 SQL Basics (weight: 3) WEB-DEVELOPMENT-ESSENTIALS Practice Questions (Page 1)

Part of the 035 NodeJS Server Programming domain, which makes up ~15% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 60-minute exam (~25–40 total, ~4–6 in this domain), expect 1–2 from this objective — we provide 18 practice questions to prepare you well beyond it. (estimate)

18questions here

4free pages

7concepts

Questions 1–5

1foundation · easy
Which SQL statement is used to add a new row to a table?
Select an answer first
2foundation · easy
Which SQL statement is used to modify existing records in a table?
Select an answer first
3application · medium
A Node.js developer is using the pg library to run an UPDATE query. The developer needs to check if the update affected any rows. Which property of the result object should be inspected?
Select an answer first
4application · medium
A developer is reviewing a Node.js codebase and finds a query built by string concatenation: `db.query('SELECT * FROM products WHERE name = "' + userInput + '"')`. The developer wants to explain the risk to a junior colleague. Which statement accurately describes the primary risk?
Select an answer first
5foundation · easy
In a Node.js application using the mysql package, which method is used to create a connection to a MySQL database?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to WEB-DEVELOPMENT-ESSENTIALS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “WEB-DEVELOPMENT-ESSENTIALS” is a trademark of its owner, used for identification only.

035.3 SQL Basics (weight: 3) WEB-DEVELOPMENT-ESSENTIALS Practice Questions (Page 1)

Questions 1–5

Which SQL statement is used to add a new row to a table?

Which SQL statement is used to modify existing records in a table?

A Node.js developer is using the pg library to run an UPDATE query. The developer needs to check if the update affected any rows. Which property of the result object should be inspected?

A developer is reviewing a Node.js codebase and finds a query built by string concatenation: `db.query('SELECT * FROM products WHERE name = "' + userInput + '"')`. The developer wants to explain the risk to a junior colleague. Which statement accurately describes the primary risk?

In a Node.js application using the mysql package, which method is used to create a connection to a MySQL database?

Keep studying — 035 NodeJS Server Programming