nerdexam
EC-Council

412-79V10 · Question #122

Harry, a penetration tester in SqlSac Solutions Ltd., is trying to check if his company's SQL server database is vulnerable. He also wants to check if there are any unpatched versions of SQL servers…

The correct answer is B. SELECT name FROM sys.server_principals WHERE TYPE = 'U'. See the full explanation below for the reasoning.

Question

Harry, a penetration tester in SqlSac Solutions Ltd., is trying to check if his company's SQL server database is vulnerable. He also wants to check if there are any unpatched versions of SQL servers existing in the network. If he found any unpatched versions, he needs to update the database. After performing various test which of the following SQL query executes an SQL input to extract all the available Windows Login Account details. Which of the following SQL query will Harry execute to obtain the information?

Options

  • ASELECT name FROM sys.server_principals WHERE TYPE = 'R'
  • BSELECT name FROM sys.server_principals WHERE TYPE = 'U'
  • CSELECT name FROM sys.server_principals WHERE TYPE = 'S'
  • DSELECT name FROM sys.server_principals WHERE TYPE = 'B'

How the community answered

(36 responses)
  • A
    8% (3)
  • B
    75% (27)
  • C
    14% (5)
  • D
    3% (1)

Community Discussion

No community discussion yet for this question.

Full 412-79V10 Practice