nerdexam
EC-Council

312-50V12 · Question #148

In an intricate web application architecture using an Oracle database, you, as a security analyst, have identified a potential SQL Injection attack surface. The database consists of 'x' tables, each w

The correct answer is D. z=400, u=4: The attacker constructs 4 SQL payloads, each focusing on tables with 400 records,. This question tests the ability to calculate total extracted data volume using the formula E = x y z * u with fixed x=4 and y=2, comparing different combinations of z and u values.

Submitted by viktor_hu· Mar 4, 2026Web Application Hacking

Question

In an intricate web application architecture using an Oracle database, you, as a security analyst, have identified a potential SQL Injection attack surface. The database consists of 'x' tables, each with 'y' columns. Each table contains 'z' records. An attacker, well-versed in SQLi techniques, crafts 'u' SQL payloads, each attempting to extract maximum data from the database. The payloads include 'UNION SELECT' statements and 'DBMS_XSLPROCESSOR.READ2CLOB' to read sensitive files. The attacker aims to maximize the total data extracted 'E=xyz*u'. Assuming 'x=4', 'y=2', and varying 'z' and 'u', which situation is likely to result in the highest extracted data volume?

Options

  • Az=600, u=2: The attacker devises 2 SQL payloads, each aimed at tables holding 600 records,
  • Bz=550, u=2: Here, the attacker formulates 2 SQL payloads and directs them towards tables
  • Cz=500, u=3: The attacker creates 3 SQL payloads and targets tables with 500 records each,
  • Dz=400, u=4: The attacker constructs 4 SQL payloads, each focusing on tables with 400 records,

How the community answered

(31 responses)
  • A
    6% (2)
  • B
    29% (9)
  • C
    10% (3)
  • D
    55% (17)

Why each option

This question tests the ability to calculate total extracted data volume using the formula E = x * y * z * u with fixed x=4 and y=2, comparing different combinations of z and u values.

Az=600, u=2: The attacker devises 2 SQL payloads, each aimed at tables holding 600 records,

With z=600 and u=2, E = 4 * 2 * 600 * 2 = 9,600, which is less than 12,800 from option D.

Bz=550, u=2: Here, the attacker formulates 2 SQL payloads and directs them towards tables

With z=550 and u=2, E = 4 * 2 * 550 * 2 = 8,800, which is less than 12,800 from option D.

Cz=500, u=3: The attacker creates 3 SQL payloads and targets tables with 500 records each,

With z=500 and u=3, E = 4 * 2 * 500 * 3 = 12,000, which is close but still less than 12,800 from option D.

Dz=400, u=4: The attacker constructs 4 SQL payloads, each focusing on tables with 400 records,Correct

With z=400 and u=4, E = 4 * 2 * 400 * 4 = 12,800, which is the highest value among all options. The larger number of SQL payloads (u=4) combined with a sufficient record count produces the maximum total data extraction volume, demonstrating that both payload count and record count contribute multiplicatively to the attack's effectiveness.

Concept tested: SQL injection data extraction volume estimation

Source: https://owasp.org/www-community/attacks/SQL_Injection

Topics

#SQL Injection#data exfiltration#database hacking#UNION SELECT

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 312-50V12 Practice