Web Application Attacks and SQL Injection ECSS Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   How can SQL injection be used to bypass authentication?

   • ABy sending a specially crafted HTTP header
   • BBy encrypting the login credentials
   • CBy using a brute-force attack on the password
   • DBy injecting a payload that makes the WHERE clause always true
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A security architect is designing a new web application that will handle sensitive customer data. The architect wants to ensure that SQL injection is not possible. Which design decision is the most effective?

   • AUse a web application firewall (WAF) in front of the application to filter all incoming requests.
   • BStore all user input in a separate database and never use it in SQL queries.
   • CUse a stored procedure for every database operation and validate all input in the stored procedure.
   • DRequire all database access to go through a data access layer that uses parameterized queries exclusively.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A penetration tester is using an automated scanner to test a web application for SQL injection. The scanner reports a potential vulnerability in a parameter, but the tester is unsure if it is a false positive. Which action is the most appropriate to validate the finding?

   • AIgnore the finding because automated scanners are known to be unreliable.
   • BManually send a few crafted payloads and observe the application's responses.
   • CReport the finding as confirmed because the scanner is trusted.
   • DRun the scanner again with the same settings and compare the results.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A web application has a public-facing login page, a REST API, and a backend database. An attacker discovers that the API endpoint /api/users?id=1 returns the full profile of user 1, including password hashes. Which component of the web application attack surface is most directly affected?

   • AThe server-side API, because it fails to enforce access control on the user resource.
   • BThe database, because it stores the password hashes in plaintext.
   • CThe client-side browser, because it renders the API response.
   • DThe network firewall, because it should have blocked the request.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What distinguishes blind SQL injection from in-band SQL injection?

   • ABlind injection does not return data directly in the application's response.
   • BBlind injection is a type of out-of-band attack.
   • CBlind injection requires physical access to the database server.
   • DBlind injection only works on MySQL databases.
   Reveal Solution Discussion Select an answer first