nerdexam
Mile2_Security

MK0-201 · Question #46

Which of the following SQL injection scripts would attempt to discover all usernames on the table users beginning with Ad?

The correct answer is B. OR 1=1; SELECT username FROM users WHERE username LIKE ad%;--. See the full explanation below for the reasoning.

Question

Which of the following SQL injection scripts would attempt to discover all usernames on the table users beginning with Ad?

Options

  • ASELECT * FROM * WHERE username = AD*
  • BOR 1=1; SELECT username FROM users WHERE username LIKE ad%;--
  • CSELECT name FROM Master..sysxlogins
  • DOR 1=2 WHERE name is like AD%--

How the community answered

(49 responses)
  • A
    4% (2)
  • B
    76% (37)
  • C
    8% (4)
  • D
    12% (6)

Community Discussion

No community discussion yet for this question.

Full MK0-201 Practice