Ethical hacker Jane Smith is attempting to perform an SQL injection attack. She wants to test the response time of a true or false response and wants to use a second command to determine whether the d

Out-of-band SQL injection relies on the database server's ability to make external network requests (e.g., DNS or HTTP) to exfiltrate data, which does not match the requirement of testing response times or true/false responses.

Union-based SQL injection appends additional SELECT queries to retrieve data directly in the response, and error-based relies on database error messages to extract information-neither tests response time or boolean true/false conditions as described.

While time-based is correct for testing response times, union-based SQL injection retrieves data by combining results from multiple SELECT statements in the visible output, not by determining true/false conditions for user IDs.

Time-based SQL injection uses commands like SLEEP() or WAITFOR DELAY to measure response time differences, directly addressing her need to test response times. Boolean-based SQL injection sends queries that return true or false results based on conditions, allowing her to determine whether specific user IDs exist by observing different page responses. Together, these two blind SQL injection techniques fulfill both of her stated testing objectives.