A3.3 Database programming questions for IB Computer Science

Outline one strength of the firewall configuration for the database server.

The search box puts the customer's text directly into an SQL query. Describe how an attacker could use SQL injection against this website, and why the firewall does not stop it.

Describe how input validation could protect the pharmacy against SQL injection.

Discuss the importance of regular security testing for the pharmacy.

Identify the two foreign keys in the Loan table.

State the names of the members who have borrowed A River in Winter.

Describe the relationship between the Member and Book tables, and how the Loan table implements it.

Construct an SQL query that lists the titles of all books borrowed by member M03, in alphabetical order.

The librarian tries to delete member M03 from the Member table.

Explain why the database might refuse this deletion.

Identify the primary key of the Truck table.

Outline the relationship between Depot and Truck.

Southgate depot changes its phone number to 0161 388 9555.

Explain why this change is simple to make and keeps the data consistent.

Construct an SQL query that lists the registration and model of every truck at the Southgate depot with a capacity of more than 10 tonnes, largest capacity first.

Identify the foreign key in the Adoption table.

State the output of the following query.

SELECT Name, Breed
FROM Animal
WHERE Species = 'Dog' AND ArrivalDate >= '2026-04-01'
ORDER BY Name;

Construct an SQL query that lists the name and species of every animal adopted by Tom Byrne, together with the adoption date, with the most recent adoption first.

The shelter takes in a Leopard tortoise called Kiko on 14 July 2026. It is given the ID A08.

Construct an SQL statement that adds this animal to the Animal table.

A volunteer runs this statement to tidy the database:

DELETE FROM Animal WHERE Species = 'Cat';

Explain one problem this statement causes.

Outline the difference between data definition language (DDL) and data manipulation language (DML).

Identify whether each of the statements 1 to 6 is DDL or DML.

Outline one reason why the pharmacy allows only the database administrator to run DDL statements.

Construct an SQL query that lists the title and start time of every film shown on screen 2 on 14 November 2026, earliest start time first.

State the output of the following query.

SELECT DISTINCT Film.Title
FROM Film
INNER JOIN Screening ON Film.FilmID = Screening.FilmID
WHERE Film.RunMins > 100 AND Screening.ShowDate = '2026-11-15';