A development team is fixing a SQL injection vulnerability in a PHP application that uses MySQL. The vulnerable code builds a query by concatenating user input into an ORDER BY clause. Which remediation should the team implement?

Escape the user input with mysqli_real_escape_string before concatenation

Validate the sort column against a whitelist of allowed column names

Use a prepared statement with a placeholder for the sort column

Remove the ORDER BY feature from the application

A penetration tester is assessing a web application that uses a search feature. The application returns different page content for true and false conditions, but the tester cannot use UNION-based injection because the application filters the keyword 'UNION'. The tester wants to extract data from the 'users' table. Which technique should the tester use?

Use a UNION-based injection with a different keyword casing

Use time-based blind injection to extract data using delays

Use boolean-based blind injection to extract data character by character

Use error-based injection to extract data via error messages

A security team is remediating a SQL injection vulnerability in a PHP application. The vulnerable code uses string concatenation to build a query for a search feature. The team is considering using PDO prepared statements. Which additional control is most important to implement?

Set the PDO error mode to ERRMODE_EXCEPTION

Use htmlspecialchars() on all user input

Use a low-privilege database account for the application

Disable PDO's emulated prepares

A security team is hardening a web application against SQL injection. The team wants to implement a defense that is effective even if input validation is bypassed. Which control should the team implement?

Use parameterized queries for all database access

Use database error suppression to hide errors

Use input validation to block special characters

Use a web application firewall (WAF) to filter malicious input

GIAC Web Application Penetration Tester

Domain 5Objective 1

Web Application SQL Injection Attacks GWAPT Practice Questions (Page 4)

Part of the Injection and Client-Side Attacks domain, which makes up ~23% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~16–28 in this domain), expect 8–14 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

4concepts

Questions 16–20

16application · medium
A development team is fixing a SQL injection vulnerability in a PHP application that uses MySQL. The vulnerable code builds a query by concatenating user input into an ORDER BY clause. Which remediation should the team implement?
Select an answer first
17expert · hard
A penetration tester is assessing a web application that uses a search feature. The application returns different page content for true and false conditions, but the tester cannot use UNION-based injection because the application filters the keyword 'UNION'. The tester wants to extract data from the 'users' table. Which technique should the tester use?
Select an answer first
18expert · hard
A security team is remediating a SQL injection vulnerability in a PHP application. The vulnerable code uses string concatenation to build a query for a search feature. The team is considering using PDO prepared statements. Which additional control is most important to implement?
Select an answer first
19application · medium
A security team is hardening a web application against SQL injection. The team wants to implement a defense that is effective even if input validation is bypassed. Which control should the team implement?
Select an answer first
20expert · hard
A tester is exploiting a SQL injection in a login form. The application uses the query: SELECT * FROM users WHERE username = '$user' AND password = '$pass'. The tester wants to log in as a specific user named 'admin' without knowing the password. Which payload should be submitted in the username field?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GWAPT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GWAPT” is a trademark of its owner, used for identification only.

Web Application SQL Injection Attacks GWAPT Practice Questions (Page 4)

Questions 16–20

A development team is fixing a SQL injection vulnerability in a PHP application that uses MySQL. The vulnerable code builds a query by concatenating user input into an ORDER BY clause. Which remediation should the team implement?

A security team is remediating a SQL injection vulnerability in a PHP application. The vulnerable code uses string concatenation to build a query for a search feature. The team is considering using PDO prepared statements. Which additional control is most important to implement?

A security team is hardening a web application against SQL injection. The team wants to implement a defense that is effective even if input validation is bypassed. Which control should the team implement?

Keep studying — Injection and Client-Side Attacks