Question
a.
The @stmt parameter in sp_executesql is a Unicode string containing valid SQL commands
b.
The input type @Type is passed as the first parameter to sp_executesql
c.
We can specify the parameters for both input and output in sp_executesql
d.
None of the mentioned
Posted under SQL Server
Engage with the Community - Add Your Comment
Confused About the Answer? Ask for Details Here.
Know the Explanation? Add it Here.
Q. Point out the wrong statement.
Similar Questions
Discover Related MCQs
Q. The Dynamic SQL Queries in a variable are __________ until they are executed.
View solution
Q. The basic syntax for using EXECUTE command is ___________
View solution
Q. Which of the following is a disadvantage of dynamic SQL?
View solution
Q. Which of the stored procedure used for dynamic SQL is prone to attacks?
View solution
Q. SQL injection is an attack in which _________ code is inserted into strings that are later passed to an instance of SQL Server.
View solution
Q. Point out the correct statement.
View solution
Q. Which of the following script is example of SQL injection attack?
View solution
Q. Any user-controlled parameter that gets processed by the application includes vulnerabilities like ___________
View solution
Q. Point out the wrong statement.
View solution
Q. Which of the stored procedure is used to test the SQL injection attack?
View solution
Q. If xp_cmdshell has been disabled with sp_dropextendedproc, we can simply inject the following code?
View solution
Q. Which of the following code can enable xp_cmdshell?
View solution
Q. Which of the following script is an example of Quick detection in the SQL injection attack?
View solution
Q. _______________ is time based SQL injection attack.
View solution
Suggested Topics
Are you eager to expand your knowledge beyond SQL Server? We've curated a selection of related categories that you might find intriguing.
Click on the categories below to discover a wealth of MCQs and enrich your understanding of Computer Science. Happy exploring!
