Quiz 3, ADO.

Net
Name __________________________
_________________________

Roll #

1. What does ADO.Net means?

a) Additive Data Objects b) ActiveX Data Object.Net
c) Additive Data reader Object d) Active Data Objects
2. Match below SQL statement with command methods. (You can select one or
more options for each commend type)
a) Select Count(*) From MyTable
b) Insert Into MyTable(id, value) Select id, value From MyTable
c) Select top 10 * From MyTable
d) Delete From MyTable Where 1=1
e) None
Command Methods
Execute NonQuerry
Execute Scalar Reader
Execute scalar
Execute Reader

SQL Statements

3. Which of these true for DataReader object

a) One record in memory at a time
b) Forward and Read Only
c) Skip a particular record
d) Both a & b
4. What is the difference between connected and disconnected model?

5. Describe disadvantages and possible limitations in using SQLCommandBuilder

object in automatically generating commands for DataAdapter

6. What is SQL Injection and how we can eliminate it?

7. Write code to mitigate SQL injection through user_input variable. What possible
solutions can be implemented here?
String query = "select * from OrdersTable where ShipCity = '" + user_input + "'";