$10)$ On Module $4\mathrm{.}4"$SQL & Database Security $-$ Part $2$: SQL Injection Demonstration in Microsoft Access" I demonstrate in Microsoft Access an SQL injection attack example and the basics on how to use prepared statements using a real Access database.

At some point in the video, I used the following code statement:

strSQL $=$ "SELECT $*$ FROM tbl$\_$Users WHERE user$=\text{'}"$ & txt$\_$user & $"\text{'}$ AND password$=\text{'}"$ & txt$\_$password & $"\text{'}$;$"$

Based on my explanation of the example from the video, txt$\_$user and txt$\_$password are:

Group of answer choices

The user's name and password for User$2.$

Form's text boxes containing input entered by a user.

The encrypted user's name and password to open the access database file.

The user's name and password fields directly extracted from the tbl$\_$Users table.