F28DM Database Connectivity Quiz

Application program connection to DBMS

To improve performance and prevent SQL injection

SQL Injection, and it can be prevented by using Prepared Statements and parameterized queries

<p>To process the results retrieved from a database query</p> Signup and view all the answers

<p>Indexing improves query performance, and MySQL creates an index on columns used in WHERE, JOIN, and ORDER BY clauses</p> Signup and view all the answers

<p>accountNo</p> Signup and view all the answers

<p>To establish a relationship between the <code>Account</code> table and the <code>branch</code> table</p> Signup and view all the answers

<p>A vendor-neutral driver is a generic driver that can connect to multiple databases, while a vendor-specific driver is specific to a particular database management system</p> Signup and view all the answers

<p>To improve performance by reusing existing connections to the database</p> Signup and view all the answers

<p>Parsing, validation, optimization, and cost estimation</p> Signup and view all the answers

<p>The query is validated and optimized at compile time, which can be a problem if the database schema changes</p> Signup and view all the answers

<p>It is open to any input and vulnerable to SQL injection.</p> Signup and view all the answers

<p>They prevent SQL injection by treating user input as a typed value, rather than part of the SQL code.</p> Signup and view all the answers

<p>It allows multiple commands to be executed.</p> Signup and view all the answers

<p>It causes every row to match the query, as <code>X=X</code> is always true.</p> Signup and view all the answers

<p>It leaves the query open to SQL injection attacks.</p> Signup and view all the answers

<p>It prevents user input from being executed as SQL code.</p> Signup and view all the answers

<p>To limit the SQL that can be injected and prevent SQL injection attacks.</p> Signup and view all the answers

<p>By escaping characters, replacing ' with \', and converting inputs to the correct type, e.g. numeric input to int.</p> Signup and view all the answers

<p>To prevent unauthorized access to the database and reduce the risk of SQL injection attacks.</p> Signup and view all the answers

<p>A Statement is a simple SQL statement, while a PreparedStatement is a precompiled SQL statement that can be executed multiple times with different parameters.</p> Signup and view all the answers

<p>By using a while loop to iterate over the rows of the result set, and using result set metadata to get properties.</p> Signup and view all the answers

<p>To prevent unauthorized access to the database and reduce the risk of SQL injection attacks.</p> Signup and view all the answers