CCOA: Certified Cybersecurity Operations Analyst

By Isaca · Question Mode

QuestionQ37

VerifiedAdversarial Tactics, Techniques, and Procedures

An organization experienced a breach through a web-application attack against a SQL database in which user inputs were not validated. This is BEST described as which type of attack?

Explanation

SQL injection is an injection attack in which untrusted input alters or supplies SQL executed by an application against a database. Missing input validation can contribute to this vulnerability.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!