1  –  statement-string

    Specifies the SQL statement to be prepared and executed
    dynamically. You either specify the statement string directly
    in a character string literal enclosed in single quotation marks,
    or in a parameter that contains the statement string.

    Whether specified directly or by a parameter, the statement
    string must be a character string that is a dynamically
    executable SQL statement The form for the statement is the same
    as in embedded SQL, except that you do not need to begin the
    string with EXEC SQL.

2  –  parameter

    Specifies the SQL statement to be prepared and executed
    dynamically. You either specify the statement string directly
    in a character string literal enclosed in single quotation marks,
    or in a parameter that contains the statement string.

    Whether specified directly or by a parameter, the statement
    string must be a character string that is a dynamically
    executable SQL statement other than the SELECT statement
    (the PREPARE lists the SQL statements that can be dynamically
    executed). The form for the statement is the same as in embedded
    SQL, except that you do not need to begin the string with EXEC
    SQL or end it with any statement terminator.