What is the best description of SQL Injection?

The correct answer is A. It is an attack used to gain unauthorized access to a database. SQL injection is a code injection technique, used to attack data-driven applications, in which malicious SQL statements are inserted into an entry field for execution (e.g. to dump the database contents to the attacker). https://en.wikipedia.org/wiki/SQL_injection

Web Server and Web Application Hacking

Question

Options

AIt is an attack used to gain unauthorized access to a database.
BIt is an attack used to modify code in an application.
CIt is a Man-in-the-Middle attack between your SQL Server and Web App Server.
DIt is a Denial of Service Attack.

How the community answered

(56 responses)

A
79% (44)
B
13% (7)
C
4% (2)
D
5% (3)

Explanation

SQL injection is a code injection technique, used to attack data-driven applications, in which malicious SQL statements are inserted into an entry field for execution (e.g. to dump the database contents to the attacker). https://en.wikipedia.org/wiki/SQL_injection

Topics

#SQL injection#database attack#web application security#unauthorized access

Community Discussion

No community discussion yet for this question.

Full CPEH-001 Practice