nerdexam
CompTIA

SY0-701 · Question #93

Which of the following involves an attempt to take advantage of database misconfigurations?

The correct answer is B. SQL injection. SQL injection is a type of attack that exploits a database misconfiguration or a flaw in the application code that interacts with the database. An attacker can inject malicious SQL statements into the user input fields or the URL parameters that are sent to the database server…

Submitted by valeria.br· Mar 6, 2026Threats, vulnerabilities, and mitigations

Question

Which of the following involves an attempt to take advantage of database misconfigurations?

Options

  • ABuffer overflow
  • BSQL injection
  • CVM escape
  • DMemory injection

How the community answered

(52 responses)
  • A
    4% (2)
  • B
    88% (46)
  • C
    2% (1)
  • D
    6% (3)

Explanation

SQL injection is a type of attack that exploits a database misconfiguration or a flaw in the application code that interacts with the database. An attacker can inject malicious SQL statements into the user input fields or the URL parameters that are sent to the database server. These statements can then execute unauthorized commands, such as reading, modifying, deleting, or creating data, or even taking over the database server. SQL injection can compromise the confidentiality, integrity, and availability of the data and the system.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice