Skip to content

CS KAIROS · LEARNING LIBRARY

M15 · SQL Injection · Q&A

Check understanding with original scenarios and a reason for every option. These answers do not establish exam or practical readiness.

Scenario questions

ceh-m15-sql-q1 · Original practice

What is the main purpose of parameter binding?

JavaScript is off: read the answer and explanation

B

This is not the purpose of parameters.
Fixed structure and bound values preserve the syntax boundary.
Authorization needs separate design.
Parameterization is not storage encryption.

ceh-m15-sql-q2 · Original practice

A user selects a sort column. What is appropriate?

JavaScript is off: read the answer and explanation

C

Arbitrary structural input crosses the boundary again.
Allowed choices still need constraints.
Mapping constrains the possible query structure.
Values and identifiers are not interchangeable.

Continue to safe practice →