Which character is the best way to start a SQL injection attempt?

Question $9$ options:

a$)$

An ampersand

b$)$

A single quote

c$)$

A colon

d$)$

A semicolon