nerdexam
EC-Council

412-79V10 · Question #73

George, a reputed ethical hacker and penetration testing consultant, was hired by FNB Services, a startup financial services company, to audit the security of their applications and infrastructure…

The correct answer is D. George is searching for the first character of the first table entry. See the full explanation below for the reasoning.

Question

George, a reputed ethical hacker and penetration testing consultant, was hired by FNB Services, a startup financial services company, to audit the security of their applications and infrastructure. George performed penetration testing on the web applications. George found that the login form of an application is vulnerable to SQL query in a form located on the vulnerable page which resulted in a back-end SQL query similar to the one given below: SELECT username,role FROM users WHERE (username='admin' AND password='1') OR 1=1;--00');0.0 What is George trying to achieve with this custom SQL query?

Options

  • AGeorge is searching for the first character of all the table entries
  • BGeorge is searching for the second character of the first table entry
  • CGeorge is searching for the first character of the second table entry
  • DGeorge is searching for the first character of the first table entry

How the community answered

(43 responses)
  • A
    5% (2)
  • B
    12% (5)
  • C
    2% (1)
  • D
    81% (35)

Community Discussion

No community discussion yet for this question.

Full 412-79V10 Practice