When do you use static SQL as a technique for avoiding SQL injection?

When do you use static SQL as a technique for avoiding SQL injection?

A.
when the WHERE clause values are unknown

B.
when the code contains data definition language (DDL) statements

C.
when all Oracle identifiers are known at the time of code compilation

D.
when the SET clause values are unknown at the time of code compilation