SQL injection attack consists of insertion or "injection" of either a partial or complete SQL query via the data input or transmitted from the client (browser) to the web application. A successful…

SQL injection attack consists of insertion or "injection" of either a partial or complete SQL query via the data input or transmitted from the client (browser) to the web application. A successful SQL injection attack can: I)Read sensitive data from the database II)Modify database data (insert/update/delete) III)Execute administration operations on the database (such as shutdown the DBMS) IV)Recover the content of a given file existing on the DBMS file system or write files into the file system V)Issue commands to the operating system. In which of the following tests is the source code of the application tested in a non-runtime environment to detect the SQL injection vulnerabilities?