Web Application Attacks and SQL Injection ECSS Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A penetration tester is performing a web application assessment. The tester wants to map the attack surface by identifying all input vectors. Which of the following is the most comprehensive approach?

   • AReview the application's source code to identify all user inputs.
   • BRun a vulnerability scanner and rely on its findings.
   • CUse a web crawler to discover all pages and then manually test each parameter.
   • DTest only the login form because it is the most critical input.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which type of SQL injection uses the same communication channel to both launch the attack and gather results?

   • AIn-band SQL injection
   • BBlind SQL injection
   • CTime-based SQL injection
   • DOut-of-band SQL injection
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A web application has a login form that is vulnerable to SQL injection. An attacker enters admin' -- in the username field and any password. The attacker is logged in as admin. What is the most likely reason this attack works?

   • AThe -- comments out the rest of the SQL query, so the password check is ignored.
   • BThe single quote closes the username string and the -- makes the database treat the password as a new column.
   • CThe database automatically trusts input that contains a comment symbol.
   • DThe admin' string is a valid username that exists in the database, and the -- is ignored by the database.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   During a web application test, a penetration tester injects a payload into a search parameter and observes that the application's response time increases significantly only when a specific condition is true. The application does not return any database error messages or display query results. Which SQL injection technique is the tester most likely exploiting?

   • AOut-of-band SQL injection using DNS exfiltration
   • BError-based SQL injection using database error messages
   • CBlind SQL injection using time-based delays
   • DIn-band SQL injection using UNION-based extraction
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is SQL injection?

   • AAn attack that inserts malicious SQL code into a query to manipulate the database
   • BA technique to overload a web server with requests
   • CA technique to bypass firewalls by sending specially crafted network packets
   • DA method to inject malicious JavaScript into web pages
   Reveal Solution Discussion Select an answer first