GAQM
CPEH-001 · Question #1033
This type of injection attack does not show any error message. It is difficult to exploit as it returns information when the application is given SQL payloads that elicit a true or false response…
The correct answer is D. Blind SQL injection. See the full explanation below for the reasoning.
Question
This type of injection attack does not show any error message. It is difficult to exploit as it returns information when the application is given SQL payloads that elicit a true or false response from the server. By observing the response, an attacker can extract sensitive information. What type of attack is this?
Options
- ATime-based SQL injection
- BUnion SQL injection
- CError-based SQL injection
- DBlind SQL injection
How the community answered
(63 responses)- A6% (4)
- B11% (7)
- C2% (1)
- D81% (51)
Community Discussion
No community discussion yet for this question.