1z0-320 Exam Dumps | You want to prevent any unauthorized users from gaining access to the personal information of your employees,

<< Prev Question Next Question >>

Question 4/40

You want to prevent any unauthorized users from gaining access to the personal information of your employees, which is stored in the EMPLOYEE table in a MySQL database. How would you use the MySQL Enterprise Edition Firewall to prevent the following SQL injection attack from exposing the salaries of all your employees?
SELECT fl_name, salary FROM EMPLOYEE WHERE fl_name= 'JHacker' OR 1=1;

A. Create a blacklist of the SQL commands, which would restrict access to the EMPLOYEE table by using the DETECTING mode.

B. Create a list of approved SQL users by using the INTERROGATION mode.

C. Create a FIREWALL STORED PROCEDURE to block any external user from executing this SQL statement.

D. Create a whitelist of approved SQL commands by using the RECORDING mode, and enable protection by changing it to PROTECTION mode.

Question 4/40

LEAVE A REPLY

Download PDF File