Free CompTIA Security+ SY0-601 Practice Question

Implementing stored procedures is a method that encapsulates database queries within the data system, allowing the application to call these procedures rather than passing untrusted queries directly. This abstraction adds a layer of protection against vulnerabilities such as injection attacks since the queries are predefined and parameterized, significantly reducing the attack surface. The incorrect options, such as embedding commands within application source code or external files, do not offer the same level of security assurance because they are more susceptible to being exploited by attackers who can manipulate input to alter the intended command. Database normalization, on the other hand, refers to the design of the database schema and does not directly impact the manner in which commands are issued or processed by the database.