You are creating an ASP.NET application by using the .NET Framework 3.5.
The application stores data in a database that might be implemented in Microsoft SQL Server, Microsoft Access, or a variety of third-party databases.
You need to implement a data access strategy that meets the following requirements:
– The same data access code is used for all database platforms.
– The application defines the SQL syntax used.
– The application reduces the vulnerability to SQL injection attacks.
What should you do?
A.
Use the SqlCommandBuilderclass.
B.
Use parameterized SQL statements.
C.
Use parameterized stored procedures.
D.
Use dynamic SQL statements and the StringBuilderclass.
E.
Use dynamic SQL statements and string concatenation.