312-50V12 Question #256: Real Exam Question with Answer & Explanation

Question

As an IT Security Analyst, you've been asked to review the security measures of an e-commerce website that relies on a SQL database for storing sensitive customer data. Recently, an anonymous tip has alerted you to a possible threat: a seasoned hacker who specializes in SQL Injection attacks may be targeting your system. The site already employs input validation measures to prevent basic injection attacks, and it blocks any user inputs containing suspicious patterns. However, this hacker is known to use advanced SQL Injection techniques. Given this situation, which of the following strategies would the hacker most likely adopt to bypass your security measures?

Options

• AThe hacker might employ a 'blind' SQL Injection attack, taking advantage of the application's true
• BThe hacker may resort to a DDoS attack instead, attempting to crash the server and thus render
• CThe hacker may try to use SQL commands which are less known and less likely to be blocked by
• DThe hacker could deploy an 'out-of-band' SQL Injection attack, extracting data via a different