Oracle Exam 1Z0-148 Topic 3 Question 14 Discussion

Actual exam question for Oracle's 1Z0-148 exam

Question #: 14
Topic #: 3

Examine the EMP table:

CREATE TABLE EMP (EMPNO NUMBER(4) NOT NULL, ENAME VARCHAR2(10));

Examine this PL/SQL procedure:

Which is the correct replacement for the assignment to variable l_sql to avoid SQL injection?

Al_sql := 'SELECT empno FROM emp WHERE ename = ''' || SYS.DBMS_ASSERT.NOOP (p_ename) || '''';

Bl_sql := 'SELECT empno FROM emp WHERE ename = ' || SYS.DBMS_ASSERT.QUALIFIED_SQL_NAME (p_ename);

Cl_sql := 'SELECT empno FROM emp WHERE ename = ' || SYS.DBMS_ASSERT.SIMPLE_SQL_NAME (p_ename);

Dl_sql := 'SELECT empno FROM emp WHERE ename = ' ||
SYS.DBMS_ASSERT.ENQUOTE_LITERAL (p_ename);

El_sql := 'SELECT empno FROM emp WHERE ename = ''' || SYS.DBMS_ASSERT.QUALIFIED_SQL_NAME (p_ename) || '''';

Show Suggested Answer

Suggested Answer: D

by Jenelle at May 05, 2022, 06:12 AM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!