Exam DA0-001 topic 1 question 129 discussion

D. To increase the query speed. The real fact is that the use on Parameterization is definitely a security approach to prevent SQL injections. But this is not a DBA certifications. The term SQL Injection in not even mentioned in some books. Meanwhile, In Chapter 3 Databases and Data Acquisition, in Query Optimization, the first factor they mention is Parameterization, and quote: "Effective use of parameterization reduces the number of times the database has to parse individual queries".

C. To prevent SQL injections Parameterization in query optimization involves using parameters instead of embedding values directly into the SQL statement. One of the primary reasons for parameterization is to prevent SQL injection attacks, where malicious SQL code is inserted into input fields by attackers. By parameterizing queries, input values are treated as data rather than executable code, reducing the risk of SQL injection vulnerabilities. While improving query speed (option D) is also a potential benefit of parameterization, preventing SQL injections is typically the most critical reason for implementing parameterized queries in database applications.