CompTIA
JK0-018 · Question #357
When an order was submitted via the corporate website, an administrator noted special characters (e.g., ";--" and "or 1=1 --") were input instead of the expected letters and numbers. Which of the…
The correct answer is D. The user is sending malicious SQL injection strings in order to extract sensitive company or customer. See the full explanation below for the reasoning.
Question
When an order was submitted via the corporate website, an administrator noted special characters (e.g., ";--" and "or 1=1 --") were input instead of the expected letters and numbers. Which of the following is the MOST likely reason for the unusual results?
Options
- AThe user is attempting to highjack the web server session using an open-source browser.
- BThe user has been compromised by a cross-site scripting attack (XSS) and is part of a botnet performing
- CThe user is attempting to fuzz the web server by entering foreign language characters which are
- DThe user is sending malicious SQL injection strings in order to extract sensitive company or customer
How the community answered
(32 responses)- A13% (4)
- B6% (2)
- C3% (1)
- D78% (25)
Community Discussion
No community discussion yet for this question.