Microsoft
70-519 · Question #65
You are reviewing an ASP.NET Web application that uses dynamic SQL. The Web application validates user credentials against a Microsoft SQL Server 2008 database by using Forms authentication and…
The correct answer is A. Perform SQL injection tests. See the full explanation below for the reasoning.
Question
You are reviewing an ASP.NET Web application that uses dynamic SQL. The Web application validates user credentials against a Microsoft SQL Server 2008 database by using Forms authentication and hashing the password. You need to recommend an approach for testing whether users can gain elevated access to the Web application. What should you recommend?
Options
- APerform SQL injection tests
- BPerform penetration tests for cross-site scripting
- CPerform Web tests that supply valid and invalid passwords
- DPerform unit tests that supply valid and invalid passwords
How the community answered
(40 responses)- A73% (29)
- B10% (4)
- C13% (5)
- D5% (2)
Community Discussion
No community discussion yet for this question.