030_SQL Injection – CompTIA Security+ SY0-701 – 2.3

Front

What is a code injection attack?

Back

An attack where malicious code is inserted into user input fields

Front

Which of the following is NOT a common type of code injection? CSS Injection, HTML Injection, SQL Injection, XML Injection, Others

Back

CSS Injection

Front

Which of the following is NOT a common type of code injection? Options: CSS Injection

Back

CSS Injection

Front

What does SQL stand for?

Back

Structured Query Language

Front

Which language is commonly used by applications to interact with databases?

Back

SQL

Front

Why is input validation important?

Back

To prevent execution of malicious code entered by users

Front

Which input would indicate a possible SQL injection? Options: OR '1'='1', AND '0'='2', 'DROP TABLE users', SELECT FROM table, WHERE name = 'user'

Back

OR '1'='1'

Front

What happens if '1'='1' is added to a SQL query?

Back

The condition always evaluates to true

Front

What is the result of injecting 'OR 1=1' in a vulnerable SQL query?

Back

All records in the database are returned

Front

Which tool is used for educational SQL injection practice?

Back

WebGoat