You create a Windows Forms application by using Microsoft Visual Studio .NET 2008 and the .NET Framework 3.5.
The application contains the following code segment.
public DataSet GetProductByID(string ProductID)
{
DataSet ds = new DataSet(“ProductList”);
string SqlSelectCommand = “Select * FROM PRODUCTS WHERE PRODUCTID=” + ProductID;
try
{
SqlDataAdapter da = new SqlDataAdapter();
SqlConnection cn = new SqlConnection(GetConnectionString());
SqlCommand cmd = new SqlCommand(SqlSelectCommand);
cmd.CommandType = CommandType.Text;
cn.Open();
da.Fill(ds);
cn.Close();
}
catch (Exception ex)
{
string msg = ex.Message.ToString();
//Perform Exception Handling Here
}
return ds;
}
You need to ensure that the code segment is as secure as possible.
What should you do?

You create an application by using Microsoft Visual Studio .NET 2008 and the .NET Framework 3.5.
The application stores human resources data in a Microsoft SQL Server 2008 database. A partial database schema is as shown in the exhibit.
(Click the Exhibit button.) Each time a row is added, modified, or deleted from the Employee table, a corresponding entry must be recorded
in the EmployeeChangeLog table. You need to implement the data change logging.
What should you do?

You create an application by using Microsoft Visual Studio .NET 2008 and the .NET Framework 3.5.
You are designing the database schema of the application.
The database schema is as shown in the exhibit. (Click the Exhibit button.)
You need to ensure that the design meets the following requirements:
– The database contains no duplicate data.
– A category can contain zero or more products.
– Each product can be associated with zero or more categories.
What should you do?

You create an application by using Microsoft Visual Studio .NET 2008 and the .NET Framework 3.5.
The application has a class that contains a method named NewEvent. The NewEvent method contains the following code segment.

using (SqlConnection cn = new SqlConnection(connString))
{
SqlCommand cmd = new SqlCommand();
cmd.Connection = cn;
cmd.CommandText = “prcEvent”;
cmd.Parameters.Add(“@Date”, SqlDbType.DateTime, 4);
cmd.Parameters.Add(“@Desc”, SqlDbType.VarChar, 8000);
cmd.Parameters.Add(“@Link”, SqlDbType.VarChar, 2048);
cmd.Parameters[“@Date”].Value = date;
cmd.Parameters[“@Desc”].Value = eventText;
cmd.Parameters[“@Link”].Value = eventLink;
cn.Open();
retcode = cmd.ExecuteNonQuery().ToString();
}
During the test process, a user executes the NewEvent method. The method fails and returns the following error message:
“A stored procedure named prcEvent requires a parameter named @Date.”
You need to resolve the error.
What should you do?