6705. SQL Security Testing: identifier allowlisting — Recover from failure without violating consistency. — School ERP — Python + FastAPI + SQLAlchemy

DBMS Published 30 Sept 2026 Updated 30 Sept 2026 0 Views Verified

Scenario: A School ERP application must handle identifier allowlisting. Recover from failure without violating consistency. Explain the invariant, SQL strategy, transaction/locking behavior, failure handling, observability and test plan. Use MySQL 8-oriented syntax where applicable.

Looking for the latest Sarkari Result 2026 updates? Check the latest government exam results, merit lists and result updates on Sarkari Resultess.

Answer & Explanation

4 Answers

Verified

Option 1: Use unparameterized dynamic SQL and rely only on application-side validation for

Use unparameterized dynamic SQL and rely only on application-side validation for identifier allowlisting.

Additional Explanation

Correctness depends on explicit invariants, safe SQL, transaction/concurrency handling and verification.

Verified

Option 2: Disable database protections and repair inconsistent rows manually after identif

Disable database protections and repair inconsistent rows manually after identifier allowlisting runs.

Additional Explanation

Correctness depends on explicit invariants, safe SQL, transaction/concurrency handling and verification.

Verified

Option 3: Run identifier allowlisting without defining transaction boundaries, retry behav

Run identifier allowlisting without defining transaction boundaries, retry behavior, or production validation.

Additional Explanation

Correctness depends on explicit invariants, safe SQL, transaction/concurrency handling and verification.

Verified Correct Answer

Option 4: Use a parameterized, transaction-aware MySQL 8 implementation for identifier all

Use a parameterized, transaction-aware MySQL 8 implementation for identifier allowlisting, validate the invariant, and explicitly test concurrency, retries and recovery.

Additional Explanation

Correctness depends on explicit invariants, safe SQL, transaction/concurrency handling and verification.