Exam CS0-002 topic 1 question 246 discussion

1=1= SQL.

A Command injection attacks an operating system, while SQL injections attack a database. It appears that this, WAF is backed by a database and therefore this has to be a SQL attack.

both conditions 1=1 and 2>1 are good indicators.

This is definitely A

1 = 1 = A

1=1, SQLi

This request is likely an attempt to perform an SQL injection attack. SQL injection attacks involve injecting malicious code into an application's SQL database in order to execute unauthorized commands or access sensitive data. The request shown in the example appears to be attempting to perform an SQL injection attack by appending malicious code to the end of a legitimate SQL query. The code "UNION ALL SELECT 1, NULL, table_name FROM information_schema.tables WHERE 2>1--" is attempting to retrieve the names of tables in the database, and the "--" at the end is used to comment out the rest of the query and prevent it from being executed. Overall, this request appears to be an attempt to perform an SQL injection attack on the application.

A, what else?

SQL injection

This is an SQL Injection attack for sure