ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 365 - SY0-601 discussion

Report
Export

A security engineer is investigating a penetration test report that states the company website is vulnerable to a web application attack. While checking the web logs from the time of the test, the engineer notices several invalid web form submissions using an unusual address: "SELECT * FROM customername”. Which of the following is most likely being attempted?

A.
Directory traversal
Answers
A.
Directory traversal
B.
SQL injection
Answers
B.
SQL injection
C.
Privilege escalation
Answers
C.
Privilege escalation
D.
Cross-site scripting
Answers
D.
Cross-site scripting
Suggested answer: B

Explanation:

SQL injection is a web application attack that involves inserting malicious SQL statements into an input field, such as a web form, to manipulate or access the database behind the application. SQL injection can be used to perform various actions, such as reading, modifying, or deleting data, executing commands on the database server, or bypassing authentication. In this scenario, the attacker is trying to use a SQL statement “SELECT * FROM customername” to retrieve all data from the customername table in the database.

asked 02/10/2024
Antonio Rodriguez
40 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first