PDI Exam Dumps | A developer is tasked to perform a security review of the ContactSearch Apex class that exists in the

<< Prev Question Next Question >>

Question 31/96

A developer is tasked to perform a security review of the ContactSearch Apex class that exists in the system.
Within the class, the developer identifies the following method as a security threat:
ist<Contact> performSearch (String lastName} [return Database.query('SELECT Id, FirstName, LastName FROM Contact WHERE LastName Like s'+lastName+'s'")?; What are two ways the developer can update the method to prevent a SOQL injection attack?
Choose 2 answers

A. Use variable binding and replace the dynamic query with a static SOQL.

B. Use the sacapeSingleQuotes method to sanitize the parameter before its use.

C. Use the Readonly annotation and the with sharing keyword on the class.

D. Use a regular expression on the parameter to remove special characters.

Question 31/96

LEAVE A REPLY

Download PDF File