Which three actions can be performed by using the DBMS_ASSERT package to prevent SQL injection?
(Choose three.)
A.
Detect a wrong user.
B.
Check input string length.
C.
Verify qualified SQL names.
D.
Validate TNS connect strings.
E.
Verify an existing schema name.
F.
Enclose string literals within double quotation marks.
C,E,F
http://docs.oracle.com/cd/E11882_01/appdev.112/e40758/d_assert.htm#ARPLS65375
how to verify one existing schema name? DBMS_ASSERT.SQL_OBJECT_NAME?
http://psoug.org/reference/dbms_assert.html