Question 11
Open question ↗A procedure must accept optional filters for region, product category, and date range without introducing SQL injection risk.
Which implementation should you recommend?
- A.Use dynamic SQL built with string concatenation from user input.
- B.Use sp_executesql with parameterized inputs.
- C.Store all filters in a screenshot for manual review.
- D.Create one procedure per possible filter combination only.