SQL Injection Attacks and Countermeasures EHE Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A financial services company discovers that an attacker exploited a SQL injection vulnerability in its customer portal. The attacker was able to modify the 'balance' column in the accounts table for multiple users. Which type of impact does this scenario primarily illustrate?

   • AAuthentication bypass, because the attacker gained unauthorized access.
   • BData theft, because the attacker accessed sensitive financial information.
   • CData manipulation, because the attacker altered existing records.
   • DDenial of service, because the database became unavailable.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A penetration tester is testing a login form that is vulnerable to SQL injection. The tester wants to bypass authentication and log in as the first user in the 'users' table without knowing a valid password. Which payload should the tester use in the username field?

   • A'; DROP TABLE users; --
   • B' UNION SELECT * FROM users; --
   • C' OR '1'='1' --
   • Dadmin' --
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A security analyst is investigating a potential SQL injection in a web application. The analyst notices that the application returns a 500 error when a single quote is added to a parameter, but returns a 200 OK with normal content when the parameter is a valid number. The analyst wants to confirm the vulnerability without causing a denial of service. Which step should the analyst take first?

   • AUse an automated scanner to brute-force the database name
   • BSend a time-based payload with a 30-second delay to confirm the vulnerability
   • CSend a boolean-based payload that should cause a true condition and compare the response to a false condition
   • DSend a UNION-based payload to extract data immediately
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A company's web application allows users to view their own order history. A security audit reveals that the application concatenates the user ID from the URL into SQL queries. Which combination of countermeasures would most effectively reduce the risk of SQL injection and unauthorized data access?

   • AUse parameterized queries and enforce row-level access controls in the application logic
   • BUse a web application firewall and disable error messages
   • CUse stored procedures exclusively for all database access
   • DSanitize the user ID by removing non-numeric characters
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A developer is reviewing code for a login form and finds the following line: SELECT * FROM users WHERE username = '$_POST['username']' AND password = '$_POST['password']'. What is the most immediate and severe risk of this code?

   • AThe application will expose the database password in error messages
   • BAn attacker can bypass authentication by injecting a condition that always evaluates to true
   • CThe application will crash if the username contains a single quote
   • DThe application will be slow because of the SELECT * query
   Reveal Solution Discussion Select an answer first