GCIH: GIAC Certified Incident HandlerDemo

By GIAC · Question Mode

QuestionQ12

Web Application Injection Attacks

How should an incident handler categorize the event shown in the output below?

Question Image

  • A DNS Spoofing
  • B SQL Injection
  • C Directory Traversal
  • D Command Injection
Explanation

The request injects SQL syntax into an application parameter, including nested SELECT statements and SLEEP(5) to induce a delayed database response. This is a time-based SQL injection attempt.

Community Discussion

No comments yet. Be the first to start the discussion!