What statements about the following method are correct? (Choose three.) 

A. It protects against a denial of service attack.

B. It does not protect against denial of service attacks.

C. It protects against SQL injection.

D. It does not protect against SQL injection because it does not use a PreparedStatement.

E. Even if the method completes without throwing an exception, a resource leak might occur.

F. If the method completes without throwing an exception, then no resource leak can occur.

public String checkAlarm (String connectionStr, boolean alarmed) throws SQLException { var query= "SELECT FROM office WHERE alarmed = true"; var con = Driver Manager.getConnection (connectionStr); var stmt = con.createStatement (); try (con; stmt; var rs = stmt.executeQuery (query)) { return rs.next() ? rs.getString("address"): null; } }