SQL Injection Attacks and Countermeasures EHE Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A development team is rewriting a legacy PHP application that has suffered multiple SQL injection incidents. The team wants to implement a defense-in-depth strategy. Which set of measures best aligns with that goal?

   • AUse stored procedures and escape all user input
   • BUse an ORM and rely on automatic sanitization
   • CUse a web application firewall and disable all error reporting
   • DUse prepared statements, validate input against an allowlist, and run the database with least-privilege credentials
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which type of SQL injection relies on the same communication channel to both inject the malicious payload and retrieve the results?

   • AOut-of-band SQL injection
   • BBlind SQL injection
   • CIn-band SQL injection
   • DTime-based SQL injection
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security analyst is using an automated scanner to test a web application for SQL injection. The scanner reports a potential vulnerability in the 'product_id' parameter. To confirm the finding, the analyst manually submits the following payload: product_id=1 AND 1=1 and then product_id=1 AND 1=2. The application returns the same page for the first request and a different page for the second. What does this indicate?

   • AThe application is not vulnerable because the responses differ.
   • BThe application is vulnerable to time-based blind SQL injection.
   • CThe application is vulnerable to UNION-based SQL injection.
   • DThe application is likely vulnerable to boolean-based blind SQL injection.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following is a common attack vector for SQL injection?

   • AThe client's operating system registry
   • BThe server's BIOS firmware settings
   • CThe physical network cable connecting the client to the server
   • DHTTP headers such as User-Agent or Referer
   Reveal Solution Discussion Select an answer first
6. 10application · easy

   A junior developer at a software company is building a feature that looks up customer records by a customer ID provided in a URL parameter. The developer writes the following code: query = "SELECT * FROM customers WHERE id = " + userInput. A senior developer reviews the code and says it is vulnerable to SQL injection. What is the primary reason this code is vulnerable?

   • AThe application does not use a stored procedure for the query.
   • BThe query selects all columns, which exposes sensitive data.
   • CUser input is concatenated directly into the SQL query string, allowing an attacker to alter the query structure.
   • DThe customer ID is not encrypted before being used in the query.
   Reveal Solution Discussion Select an answer first