Web Application Attacks and SQL Injection ECSS Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A development team is fixing a SQL injection vulnerability in a PHP application. The application currently builds queries like: SELECT * FROM products WHERE category = '$_GET['cat']'. The team wants to eliminate the vulnerability with minimal code changes while preserving functionality. Which approach is the most effective?

   • AAdd a client-side JavaScript function that blocks quotes and semicolons in the input field.
   • BUse a prepared statement with a parameterized query for the category value.
   • CEscape single quotes in the input using a custom function before concatenation.
   • DRemove the category parameter from the query and hardcode all product categories.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A penetration tester is testing a web application that uses a NoSQL database. The tester suspects that the application is vulnerable to injection attacks. Which statement is true regarding NoSQL injection?

   • ANoSQL injection is the same as SQL injection and can be detected with the same payloads.
   • BNoSQL databases can be vulnerable to injection attacks if user input is used to build queries without proper sanitization or parameterization.
   • CNoSQL injection is only possible in document databases, not key-value stores.
   • DNoSQL databases are immune to injection attacks because they do not use SQL.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which of the following is an example of improper input validation that can lead to an injection attack?

   • AStoring passwords using a strong hashing algorithm
   • BAccepting user input without checking for special characters
   • CUsing HTTPS to encrypt data in transit
   • DImplementing a firewall to block external traffic
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A security team is reviewing a web application that is vulnerable to SQL injection. The team wants to implement a defense-in-depth approach. Which combination of controls would be most effective?

   • AEncrypting all database traffic and using a strong password policy.
   • BDisabling error messages and using a blacklist of SQL keywords.
   • CParameterized queries, input validation, and least privilege database accounts.
   • DClient-side JavaScript validation and a web application firewall (WAF).
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A penetration tester is testing a web application that is vulnerable to SQL injection. The tester wants to exfiltrate data using DNS requests. Which SQL injection technique should the tester use?

   • AIn-band SQL injection using UNION SELECT.
   • BOut-of-band SQL injection using xp_dirtree on SQL Server.
   • CError-based SQL injection using error messages.
   • DBlind SQL injection using boolean-based payloads.
   Reveal Solution Discussion Select an answer first