During a SQL update of a database, a temporary field that was created was replaced by an attacker in order to allow access to the system. Which of the following best describes this type of…

Question

Options

• ARace condition
• BMemory injection
• CMalicious update
• DSide loading

• A
  6% (1)
• C
  94% (16)

Explanation

Important caveat first: The stated correct answer here appears to be incorrect. This scenario is a textbook Race Condition (option A), not option C.

Why A (Race condition) is actually correct: A race condition - specifically a TOCTOU (Time-of-Check to Time-of-Use) attack - occurs when an attacker exploits the timing gap between when a temporary resource is created and when it is used. Replacing a temporary field during a SQL update process before the system consumes it is the defining example of this vulnerability class.

Why the distractors are wrong:

• B. Memory injection refers to injecting malicious code into process memory (e.g., buffer overflows) - no memory space exploitation is described here.
• C. Malicious update is not a recognized security taxonomy term; it's a generic descriptor, not a vulnerability class.
• D. Side loading refers to loading unauthorized code/libraries alongside legitimate ones - unrelated to temporary field replacement.

My recommendation: If this is from a practice exam or study guide, double-check the source. Many third-party CompTIA/Security+ dumps contain errors. The scenario as written maps precisely to Race Condition - I'd answer A on an actual exam.

Memory tip for race conditions: Think "temp file = race bait" - any time a temporary resource is created and later consumed, there's a window an attacker can exploit.

No community discussion yet for this question.