Oracle Database Advanced PL SQL 12c 1z0 148

Question : 41 of 54

Marks: +1, -0

Examine the EMP table:
CREATE TABLE EMP (EMPNO NUMBER(4) NOT NULL, ENAME VARCHAR2(10));
Examine this PL/SQL procedure:

Which is the correct replacement for the assignment to variable l_sql to avoid SQL injection?

l_sql := 'SELECT empno FROM emp WHERE ename = ''' || SYS.DBMS_ASSERT.NOOP (p_ename) || '''';
l_sql := 'SELECT empno FROM emp WHERE ename = ' || SYS.DBMS_ASSERT.QUALIFIED_SQL_NAME (p_ename);
l_sql := 'SELECT empno FROM emp WHERE ename = ' || SYS.DBMS_ASSERT.SIMPLE_SQL_NAME (p_ename);
l_sql := 'SELECT empno FROM emp WHERE ename = ' || SYS.DBMS_ASSERT.ENQUOTE_LITERAL (p_ename);
l_sql := 'SELECT empno FROM emp WHERE ename = ''' || SYS.DBMS_ASSERT.QUALIFIED_SQL_NAME (p_ename) || '''';

Go to Question:

Prev Question

Next Question