Valid 70-486 Dumps shared by ExamDiscuss.com for Helping Passing 70-486 Exam! ExamDiscuss.com now offer the newest 70-486 exam dumps, the ExamDiscuss.com 70-486 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com 70-486 dumps with Test Engine here:
You are developing an ASP.NET MVC application that uses forms authentication. The application uses SQL queries that display customer order data. You need to prevent all SQL injection attacks against the application. How should you secure the queries?
Correct Answer: A
Explanation/Reference: Explanation: With most development platforms, parameterized statements that work with parameters can be used (sometimes called placeholders or bind variables) instead of embedding user input in the statement. A placeholder can only store a value of the given type and not an arbitrary SQL fragment. Hence the SQL injection would simply be treated as a strange (and probably invalid) parameter value. Reference: https://en.wikipedia.org/wiki/SQL_injection#Parameterized_statements