ZapCom Group interview question

Q. How prepared statements prevents sql injection?