SQL Injection Attacks and Countermeasures EHE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary purpose of a SQL injection attack?

   • ATo manipulate or retrieve data from a database by injecting malicious SQL code into an application's query
   • BTo execute arbitrary operating system commands on the web server
   • CTo flood the web server with traffic to cause a denial of service
   • DTo intercept and modify network traffic between the client and server
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In a blind SQL injection scenario, how does an attacker typically extract information from the database?

   • ABy using UNION queries to combine results with the original query
   • BBy sending the results to an external server via DNS requests
   • CBy reading the database error messages displayed on the page
   • DBy observing the application's response for true/false conditions or time delays
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A developer at a retail company is building a login form for an internal inventory system. The application currently concatenates user-supplied username and password values directly into a SQL query string. During a code review, a security analyst warns that this pattern could allow an attacker to bypass authentication. Which remediation should the developer implement to most directly address the vulnerability?

   • AStore the database credentials in a configuration file outside the web root.
   • BUse parameterized queries with bound parameters for the login query.
   • CAdd client-side JavaScript validation to the login form to block special characters.
   • DEncode the username and password using base64 before including them in the query.
   Reveal Solution Discussion Select an answer first
5. 4expert · medium

   A company is deploying a new web application and wants to implement a comprehensive SQL injection defense strategy. The application will handle financial data and must comply with industry regulations. The team has decided to use parameterized queries, but they also want to add an additional layer of defense. Which additional control would be most effective in reducing SQL injection risk?

   • AImplement a web application firewall (WAF) with SQL injection rules.
   • BDisable all database error messages in production.
   • CStore all queries in stored procedures without parameters.
   • DUse a database account with broad privileges to ensure functionality.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A penetration tester is assessing a web application that returns the same generic error page for any invalid input. The tester wants to determine if a parameter is vulnerable to SQL injection. Which test would provide the most reliable indicator without relying on error messages?

   • ASubmit a payload that causes a time delay and measure the response time
   • BSubmit a boolean payload and compare the HTTP status codes
   • CSubmit a UNION-based payload and look for additional rows in the response
   • DSubmit a single quote and look for a database error in the response
   Reveal Solution Discussion Select an answer first