CompTIA Security+ SY0-701 Practice Question
An attacker cannot perform a SQL injection attack if a web application's input fields are limited to predefined choices such as drop-down menus and radio buttons.
This statement is correct.
This statement is incorrect.