Question

A security analyst identified an sql injection attack.

Which of the following is the first step in remediating the vulnerability?

A. implement stored procedures

B. implement proper error handling

C. implement input validations

D. implements a WAF.

Please explain. The only two options in my mind are A and C.

Answer 1

Answer 1: C

If we add input validations than we can restrict the user from enter the malicious data in the inputs so with out any malicious characters attacker can't perform the sql injections

Wrong Answers:

A. implement stored procedures : will not stop injection as malicious chars can come into procedures also

B. implement proper error handling : this will not stop injections

D. implements a WAF.