Answer / jerry joseph

1. identify and create optimal indexes for your tables

every table should have at least a clustered index

Indexes should be considered on all columns that are
frequently accessed by the WHERE, ORDER BY, GROUP BY, TOP,
and DISTINCT clauses

Static tables can be more heavily indexed that dynamic tables

2. An SQL Injection attack is a form of attack that comes
from user input that has not been checked to see that it is
valid. The objective is to fool the database system into
running malicious code that will reveal sensitive
information or otherwise compromise the server.

Example:
StrSQL = "SELECT * from Users WHERE username = '" +
txtUserName.Text + "' AND password = '" + txtPassword.Text +
"'";
if txtUserName is entered as "admin' OR 1 = 1;--" the query
becomes
"SELECT * from Users WHERE username = 'admin' OR 1 = 1;--'
AND password = '" + txtPassword.Text + "'"
user logs in as admin

Prevention :
Use Parameterized Queries or Stored Procedures to prevent
SQL Injection.

what is the Surrogate key?and wt is the diff between Primary key and Surrogate Key?

2 Answers  

---

What is scalar user-defined function?

0 Answers  

---

What do you understand by a view? What does the with check option clause for a view do?

0 Answers  

---

What is the difference between Clustered and Non-Clustered Index?

0 Answers  

---

Explain activity monitors

0 Answers  

---

If no size is defined while creating the database, what size will the database have?

0 Answers  

---

What is difference between stored procedure & function?

3 Answers   CarrizalSoft Technologies, Concept Infoway, TATA,

---

Describe triggers features and limitations?

0 Answers  

---

What is save transaction and save point?

0 Answers  

---

What is a bit datatype?

0 Answers  

---

What stored by the model?

0 Answers  

---

What is application role in sql server database security? : sql server security

0 Answers  

---