nerdexam
EC-Council

EC0-350 · Question #260

What is the main difference between a "Normal" SQL Injection and a "Blind" SQL Injection vulnerability?

The correct answer is D. The vulnerable application does not display errors with information about the injection results to. See the full explanation below for the reasoning.

Question

What is the main difference between a "Normal" SQL Injection and a "Blind" SQL Injection vulnerability?

Options

  • AThe request to the web server is not visible to the administrator of the vulnerable application.
  • BThe attack is called "Blind" because, although the application properly filters user input, it is still
  • CThe successful attack does not show an error message to the administrator of the affected application.
  • DThe vulnerable application does not display errors with information about the injection results to

How the community answered

(24 responses)
  • A
    8% (2)
  • B
    17% (4)
  • C
    4% (1)
  • D
    71% (17)

Community Discussion

No community discussion yet for this question.

Full EC0-350 Practice