Web Application Attacks and SQL Injection ECSS Practice Questions (Page 11)

Questions 51–53

1. 51application · medium

   A security analyst is testing a web application for SQL injection. The analyst submits a single quote (') in a product ID parameter and receives a detailed database error message that reveals the SQL query structure. Which of the following is the most appropriate next step to confirm the vulnerability and extract data?

   • AReplace the single quote with a double quote to see if the error changes.
   • BImmediately report the vulnerability and stop testing to avoid causing damage.
   • CUse the error message to craft a UNION-based query to enumerate table names and extract data.
   • DRun a full port scan on the database server to identify other services.
   Reveal Solution Discussion Select an answer first
2. 52foundation · easy

   Which of the following is the most effective defense against SQL injection?

   • AUsing parameterized queries (prepared statements)
   • BUsing a web application firewall (WAF)
   • CDisabling error messages
   • DEncoding all user input with base64
   Reveal Solution Discussion Select an answer first
3. 53expert · hard

   A development team is migrating a legacy PHP application to a modern framework. The application has many SQL queries built by concatenation. The team wants to eliminate SQL injection while minimizing the risk of breaking existing functionality. Which approach is the best?

   • AUse a database user with read-only permissions for all queries.
   • BRefactor all database queries to use the framework's query builder or ORM with parameter binding.
   • CDeploy a web application firewall (WAF) to block SQL injection attempts.
   • DAdd a global input sanitization function that strips quotes and semicolons from all user input.
   Reveal Solution Discussion Select an answer first