CompTIA Security+ (SY0-501) — Question 416

A security analyst identified an SQL injection attack.
Which of the following is the FIRST step in remediating the vulnerability?

Answer options

• A. Implement stored procedures.
• B. Implement proper error handling.
• C. Implement input validations.
• D. Implement a WAF.

Correct answer: C

Explanation

The first step in addressing an SQL injection vulnerability is to implement input validations, which ensures that only properly formatted data is accepted. While stored procedures, error handling, and a WAF can enhance security, they should be secondary steps that follow the fundamental practice of validating inputs.