Certified Ethical Hacker CEH · Free Practice Question Hard
Question 99
As a white hat hacker of HDA Inc., you want to test a critical database by simulating the SQL injection attacks based on true /false based questions. You should use:
- A A. Classic SQLi
- B B. Error based SQLi
- C C. Union based SQLi
- D D. Blind SQLi
Reveal correct answer
Correct answer: D
Explanation
Correct Answer: D. Blind SQLi Explanation: A. In a Classic SQLi attack, the attacker uses the same communication channel to send the attack and receive the results. This type of attack is also known as In-band SQL injection. Classic SQLi can be further divided into two types: error-based and union-based. B. Error based SQLi attack is based on inducing the application to generate errors that reveal information about the database structure or contents. C. Union based SQL injection is a specific type of SQL injection that involves using the "union" operator in SQL to combine the results of two or more queries into a single result set. The attacker uses this technique to retrieve data from the database that they are not authorized to access. D. In blind attack, the attacker cannot see the results of the attack directly. Instead, the attacker must infer the results by analyzing the application's behavior. This type of attack is also known as inferential SQL injection. Inference is generally based on true/false results produced by the server to the respective queries. It is more difficult to execute than in-band SQLi because the attacker cannot see the results of the attack directly.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
