A security analyst is reviewing WAF alerts and sees the following request: Request="GET /public/report.html?iewt=9064 AND 1=1 UNION ALL SELECT 1,NULL,table_name FROM information_schema.tables WHERE…

The correct answer is A. SQL injection. A Command injection attacks an operating system, while SQL injections attack a database. It appears that this, WAF is backed by a database and therefore this has to be a SQL attack.

Submitted by the_admin· Mar 6, 2026Security Operations

Question

A security analyst is reviewing WAF alerts and sees the following request:

Request="GET /public/report.html?iewt=9064 AND 1=1 UNION ALL SELECT 1,NULL,table_name FROM information_schema.tables WHERE 2>1--/**/; HTTP/1.1 Host=mysite.com Which of the following BEST describes the attack?

Options

ASQL injection
BLDAP injection
CCommand iniection
DDenial of service

How the community answered

(37 responses)

A
89% (33)
B
3% (1)
C
3% (1)
D
5% (2)

Explanation

A Command injection attacks an operating system, while SQL injections attack a database. It appears that this, WAF is backed by a database and therefore this has to be a SQL attack.

Topics

#SQL injection#web application attacks#WAF alerts#database attacks

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice