Microsoft
70-519 · Question #215
You are reviewing an ASP.NET Web application that uses dynamic SQL. The Web application validates user credentials against a Microsoft SQL Server 2008 database by using Forms authentication and…
The correct answer is C. Perform SQL injection tests. See the full explanation below for the reasoning.
Question
You are reviewing an ASP.NET Web application that uses dynamic SQL. The Web application validates user credentials against a Microsoft SQL Server 2008 database by using Forms authentication and hashing the password. You need to recommend an approach for testing whether users can gain elevated access to the Web application. What should you recommend?
Options
- APerform unit tests that supply valid and invalid passwords
- BPerform Web tests that supply valid and invalid passwords
- CPerform SQL injection tests
- DPerform penetration tests for cross-site scripting
How the community answered
(42 responses)- A5% (2)
- B12% (5)
- C81% (34)
- D2% (1)
Community Discussion
No community discussion yet for this question.