ECSA v10: EC-Council Certified Security Analyst v10

By ECCouncil · Question Mode

QuestionQ127

VerifiedDatabase Penetration Testing Methodology

Harry, a penetration tester at SqSac Solutions Ltd., is attempting to determine whether his company’s SQL Server database is vulnerable. He also wants to find out whether any loopholes could allow perpetrators to exploit the database and obtain user-account login details. After carrying out various test attempts, Harry finally runs an SQL query that lets him extract all available Windows Login Account details.

Which of the following SQL queries did Harry execute to obtain this information?

Explanation

In sys.server_principals, the type value U denotes a Windows login. Selecting name with WHERE TYPE = 'U' therefore returns the available Windows login principals.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!