A web application firewall (WAF) blocks requests containing the keyword 'OR' in the query string. A penetration tester has found a SQL injection point in a login form and wants to bypass the filter to perform a UNION-based attack. Which technique is most likely to succeed?

Use inline comments to break up the keyword, such as 'O/**/R'

Use a boolean-based blind injection that does not require the 'OR' keyword

Use a time-based payload that does not contain 'OR'

Encode the keyword as a hexadecimal string

Which of the following is a common technique to bypass a WAF that filters the keyword 'SELECT'?

Using inline comments like /*!SELECT*/

Using a time-based payload like SLEEP(5)

Using an error-based payload with CAST()

What is the key characteristic of time-based blind SQL injection?

The attacker observes differences in page content for true/false conditions

The attacker uses UNION queries to display data directly

The attacker relies on database error messages to extract data

The attacker infers information by causing a delay in the database response

A database administrator is hardening a web application's database account. The application only needs to perform SELECT queries on a single table for a public catalog. Which database account configuration should the administrator apply to minimize the impact of a potential SQL injection?

Grant SELECT on all tables in the database

Grant the account full database owner privileges

Grant the account only SELECT permission on the required table

Grant EXECUTE on all stored procedures

EC-CouncilWeb Application Hacking and Security

Domain 2Objective 1

Advanced SQL Injection (SQLi) WAHS Practice Questions (Page 2)

Part of the Injection Attacks domain, which makes up ~12% of our current practice bank. EC-Council does not publish an official question count, but from its 360-minute exam (~145–240 total, ~17–29 in this domain), expect 6–10 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

9concepts

Questions 6–10

6application · medium
A web application firewall (WAF) blocks requests containing the keyword 'OR' in the query string. A penetration tester has found a SQL injection point in a login form and wants to bypass the filter to perform a UNION-based attack. Which technique is most likely to succeed?
Select an answer first
7foundation · easy
Which of the following is a common technique to bypass a WAF that filters the keyword 'SELECT'?
Select an answer first
8foundation · easy
What is the key characteristic of time-based blind SQL injection?
Select an answer first
9application · medium
A database administrator is hardening a web application's database account. The application only needs to perform SELECT queries on a single table for a public catalog. Which database account configuration should the administrator apply to minimize the impact of a potential SQL injection?
Select an answer first
10foundation · easy
Which of the following payloads is specifically designed to test for SQL injection by causing a true condition in a query?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to WAHS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “WAHS” is a trademark of its owner, used for identification only.