nerdexam
EC-Council

412-79V10 · Question #111

Stuart is a penetration tester working with Regional Server Technologies. He was asked by the company to identify the vulnerabilities in its SQL database. Stuart wanted to perform a SQL penetration…

The correct answer is B. @@variable. See the full explanation below for the reasoning.

Question

Stuart is a penetration tester working with Regional Server Technologies. He was asked by the company to identify the vulnerabilities in its SQL database. Stuart wanted to perform a SQL penetration by passing some SQL commands through a web application for execution and succeeded with a command that resulted in an error message. Which of the following strings is a wildcard attribute indicator?

Options

  • A?param1=foo¶m2=bar
  • B@@variable
  • C@variable
  • D%

How the community answered

(35 responses)
  • A
    17% (6)
  • B
    71% (25)
  • C
    3% (1)
  • D
    9% (3)

Community Discussion

No community discussion yet for this question.

Full 412-79V10 Practice