A penetration tester is testing a web application that uses a search feature. The application returns the same page content regardless of whether a SQL condition is true or false, but the tester observes a time delay when submitting a payload with SLEEP. Which detection technique should the tester use to confirm the vulnerability?

Use UNION-based detection by submitting a UNION payload

Use time-based detection by injecting a delay and measuring the response time

Use error-based detection by submitting a single quote

Use boolean-based detection by comparing responses for true and false conditions

Which of the following is an example of applying the least privilege principle to mitigate the impact of SQL injection?

Encrypting all data in the database using transparent data encryption (TDE)

Using a strong password for the database administrator account

Creating a database user with only the permissions required for the application, such as SELECT, INSERT, UPDATE, and DELETE on specific tables

Placing the database server on a separate network segment behind a firewall

A developer is reviewing code that uses an Object-Relational Mapping (ORM) framework. The developer finds a method that builds a dynamic query using string concatenation for a 'sort' parameter. Which action best addresses the risk?

Log all sort parameter values for later review

Use the ORM's parameterized query API for the sort column

Map the sort parameter to a fixed set of allowed column names

Sanitize the sort parameter by removing all non-alphanumeric characters

A security team is hardening a web application that uses a database account with administrative privileges. The team is implementing parameterized queries to prevent SQL injection. Which additional measure is most important to reduce the impact of a successful injection?

Create a dedicated low-privilege database account for the application

Disable the database's stored procedures

Use a web application firewall to block SQL keywords

Encrypt all data in the database

GIAC Web Application Penetration Tester

Domain 5Objective 1

Web Application SQL Injection Attacks GWAPT Practice Questions (Page 5)

Part of the Injection and Client-Side Attacks domain, which makes up ~23% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~16–28 in this domain), expect 8–14 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

4concepts

Questions 21–25

21expert · hard
A penetration tester is testing a web application that uses a search feature. The application returns the same page content regardless of whether a SQL condition is true or false, but the tester observes a time delay when submitting a payload with SLEEP. Which detection technique should the tester use to confirm the vulnerability?
Select an answer first
22foundation · easy
Which of the following is an example of applying the least privilege principle to mitigate the impact of SQL injection?
Select an answer first
23application · medium
A penetration tester is exploiting a SQL injection vulnerability in a login form. The tester wants to bypass authentication without knowing a valid username or password. Which payload should the tester use in the username field?
Select an answer first
24application · medium
A developer is reviewing code that uses an Object-Relational Mapping (ORM) framework. The developer finds a method that builds a dynamic query using string concatenation for a 'sort' parameter. Which action best addresses the risk?
Select an answer first
25application · medium
A security team is hardening a web application that uses a database account with administrative privileges. The team is implementing parameterized queries to prevent SQL injection. Which additional measure is most important to reduce the impact of a successful injection?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GWAPT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GWAPT” is a trademark of its owner, used for identification only.

Web Application SQL Injection Attacks GWAPT Practice Questions (Page 5)

Questions 21–25

Which of the following is an example of applying the least privilege principle to mitigate the impact of SQL injection?

A penetration tester is exploiting a SQL injection vulnerability in a login form. The tester wants to bypass authentication without knowing a valid username or password. Which payload should the tester use in the username field?

A developer is reviewing code that uses an Object-Relational Mapping (ORM) framework. The developer finds a method that builds a dynamic query using string concatenation for a 'sort' parameter. Which action best addresses the risk?

A security team is hardening a web application that uses a database account with administrative privileges. The team is implementing parameterized queries to prevent SQL injection. Which additional measure is most important to reduce the impact of a successful injection?

Keep studying — Injection and Client-Side Attacks