A penetration testing report indicated that an organization should implement controls related to database input validation. Which of the following best identifies the type of vulnerability that was…

The correct answer is D. SQLi. SQL injection (SQLi) exploits improper or missing input validation in database queries, allowing attackers to manipulate SQL commands and access or modify database content.

Submitted by olafpl· Mar 6, 2026Threats, vulnerabilities, and mitigations

Question

A penetration testing report indicated that an organization should implement controls related to database input validation. Which of the following best identifies the type of vulnerability that was likely discovered during the test?

Options

AXSS
BCommand injection
CBuffer overflow
DSQLi

How the community answered

(31 responses)

A
10% (3)
B
3% (1)
C
16% (5)
D
71% (22)

Explanation

SQL injection (SQLi) exploits improper or missing input validation in database queries, allowing attackers to manipulate SQL commands and access or modify database content.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice