GCIH: GIAC Certified Incident HandlerDemo

By GIAC · Question Mode

QuestionQ63

Web Application Injection Attacks

Which character would you use to check whether an application is vulnerable to an SQL injection attack?

  • A Dash (-)
  • B Double quote (")
  • C Single quote (')
  • D Semi colon (;)
Explanation

A single quote can terminate a SQL string literal when application input is concatenated into a query without proper parameterization or escaping, making it a standard initial probe for SQL injection vulnerabilities.

Community Discussion

No comments yet. Be the first to start the discussion!