412-79V8 · Question #15
Black-box testing is a method of software testing that examines the functionality of an application (e.g. what the software does) without peering into its internal structures or workings. Black-box…
The correct answer is D. Use a right square bracket (the "]" character) as the input data to catch instances where the user input. See the full explanation below for the reasoning.
Question
Black-box testing is a method of software testing that examines the functionality of an application (e.g. what the software does) without peering into its internal structures or workings. Black-box testing is used to detect issues in SQL statements and to detect SQL injection vulnerabilities. Most commonly, SQL injection vulnerabilities are a result of coding vulnerabilities during the Implementation/Development phase and will likely require code changes. Pen testers need to perform this testing during the development phase to find and fix the SQL injection vulnerability. What can a pen tester do to detect input sanitization issues?
Exhibit
Options
- ASend single quotes as the input data to catch instances where the user input is not sanitized
- BSend double quotes as the input data to catch instances where the user input is not sanitized
- CSend long strings of junk data, just as you would send strings to detect buffer overruns
- DUse a right square bracket (the "]" character) as the input data to catch instances where the user input
How the community answered
(45 responses)- A7% (3)
- B2% (1)
- C11% (5)
- D80% (36)
Community Discussion
No community discussion yet for this question.