Understanding Dynamic SQL and JDBC

What is Dynamic SQL

• SQL that is fixed and cannot be changes

• SQL statement generated at runtime

• SQL used for data retrieval only

• SQL that cannot be executed

Which statement is used to create a Prepared Statement in JDBC?

• Statement.createPreparedStatement()

• Connection.prepareStatement

• PreparedStatement.prepare()

• Statement.createStatement()

What is the main benefit of using Prepared Statement

• They are easier to read

• They prevent SQL injection attacks

• They are faster than regular SQL statements

• They are only used for SELECT queries

Which of the following methods is used to set parameters in a Prepared Statement?

• setParam()

• setInt() / setString()

• bindParam()

• updateParam()

What does the DriverManager.getConnection() method do?

(a)  

What is the primary purpose of using Prepared Statements?

(a)  

What interface does a Prepared Statement implement in JDBC?

• Statement

• Connection

• ResultSet

• CallableStatement

Which SQL command is NOT typically associated with Dynamic SQL

• SELECT

• UPDATE

• INSERT

• CREATE TABLE

How can you prevent SQL injection when using Dynamic SQL

• By using user input directly in the SQL query

• By using Prepared Statement

• By limiting user access

• By using a different programming language

What is JDBC?

(a)