nerdexam
Mile2_Security

ML0-320 · Question #176

Which of the following SQL injection scripts would attempt to discover all usernames on the table users beginning with Ad?

The correct answer is B. OR 1=1; SELECT username FROM users WHERE username LIKE ad%-. See the full explanation below for the reasoning.

Question

Which of the following SQL injection scripts would attempt to discover all usernames on the table users beginning with Ad?

Options

  • ASELECT FROM WHERE username =AD*
  • BOR 1=1; SELECT username FROM users WHERE username LIKE ad%-
  • CSELECT name FROM Master..sysxlogins
  • DOR 1=2 WHERE name is like AD%-

How the community answered

(61 responses)
  • A
    3% (2)
  • B
    75% (46)
  • C
    13% (8)
  • D
    8% (5)

Community Discussion

No community discussion yet for this question.

Full ML0-320 Practice