In a database application, a SQL query is responsible for retrieving financial transaction records. You suspect that the query might be prone to SQL injection attacks. What action should you take to verify and secure the query?

Using parameterized queries is an effective way to prevent SQL injection attacks. Parameterized queries separate SQL code from user input, making it impossible for attackers to inject malicious SQL code into the query. This practice enhances the security of the application by ensuring that all input values are treated as data rather than executable SQL code.