GPYC: GIAC Python CoderDemo

By GIAC · Question Mode

QuestionQ12

Database Interaction

What action does an attacker take in a SQL injection attack?

  • A Obtains an administrative login for a SQL database server
  • B Finds and exploits CVSS-SIG vulnerabilities in a particular version of SQL database
  • C Inject information into an SQL server via an undocumented administrative interface
  • D Submits a string that is interpreted as a SQL database command
Explanation

SQL injection occurs when crafted input is treated as SQL code by an application and executed as a database command.

Community Discussion

No comments yet. Be the first to start the discussion!