Report question

Question: How does SQL query parameterisation work?