A security tester is testing a website and performs the following manual query: The following response is received in the payload: "ORA-000001: SQL command not properly ended" Which of the following…

Fingerprinting is the reconnaissance technique of identifying the type and version of software running on a target system. The error message 'ORA-000001: SQL command not properly ended' is Oracle-specific syntax, revealing to the tester that the backend database is Oracle - this is valuable target intelligence even though no data was extracted or modified.

Cross-site scripting involves injecting malicious JavaScript into a web page to execute in another user's browser, which has no relation to submitting a database query and receiving a vendor-specific error response.

SQL injection is the attack vector used to craft and submit the query, but the error response itself is evidence of fingerprinting - the question asks what the response is an example of, not what technique was used.

Privilege escalation involves obtaining higher access rights than originally authorized within a system, and is not demonstrated by receiving a database syntax error message.