Free CompTIA CySA+ CS0-003 Practice Question

Parameterized queries should be used to mitigate SQL injection attacks. This technique ensures that SQL code and data are separated, preventing attackers from injecting malicious SQL code that could alter database queries. Other methods, like input validation, are important but do not address the root cause of SQL injection in the direct manner that parameterized queries do.