CompTIACompTIA
SY0-701 · Question #994
SY0-701 Question #994: Real Exam Question with Answer & Explanation
The correct answer is D: SQLi. SQL injection (SQLi) exploits improper or missing input validation in database queries, allowing attackers to manipulate SQL commands and access or modify database content.
Submitted by olafpl· Mar 6, 2026Threats, vulnerabilities, and mitigations
Question
A penetration testing report indicated that an organization should implement controls related to database input validation. Which of the following best identifies the type of vulnerability that was likely discovered during the test?
Options
- AXSS
- BCommand injection
- CBuffer overflow
- DSQLi
Explanation
SQL injection (SQLi) exploits improper or missing input validation in database queries, allowing attackers to manipulate SQL commands and access or modify database content.
Community Discussion
No community discussion yet for this question.