030_SQL Injection – CompTIA Security+ SY0-701 – 2.3

Which is a recommended protection against SQL injection?

• Parameterized queries

• Storing passwords in plain text

• Using JavaScript filters

• Blocking port 80

What is the result of injecting 'OR 1=1' in a vulnerable SQL query?

• All records in the database are returned

• Only the first record is returned

• No records are returned

• An error message is displayed

Which is a technique to avoid SQL injection?

• Prepared statements

• Minifying code

• Using long passwords

• Adding CSS validation

Why is SQL injection considered critical?

• It allows attackers to access or modify all database data

• It is a method to improve database performance

• It helps in data encryption

• It prevents unauthorized access to the database

What does SQL stand for?

• Structured Query Language

• Simple Query Language

• Sequential Query Language

• Standard Query Language

Which field was used in the WebGoat example?

• Transaction Authentication Number

• Bank PIN

• Email address

• Credit card number

Which tool is used for educational SQL injection practice?

• SQLMap

• WebGoat

• Burp Suite

• OWASP ZAP

In the WebGoat example, what was the original Auth Number?

• 3SL99A

• 4AB12B

• 5CD34C

• 6EF56D

How easy is it to perform a SQL injection?

• Very easy using a web browser

• Somewhat difficult without prior knowledge

• Only possible with advanced tools

• Requires extensive programming skills

Which language is commonly used by applications to interact with databases?

• HTML

• Python

• SQL

• Java