Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam 312-50v12 topic 1 question 77 discussion

Actual exam question from ECCouncil's 312-50v12
Question #: 77
Topic #: 1
[All 312-50v12 Questions]

Ethical hacker Jane Smith is attempting to perform an SQL injection attack. She wants to test the response time of a true or false response and wants to use a second command to determine whether the database will return true or false results for user IDs.
Which two SQL injection types would give her the results she is looking for?

  • A. Out of band and boolean-based
  • B. Union-based and error-based
  • C. Time-based and union-based
  • D. Time-based and boolean-based
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
g_man_rap
3 weeks, 2 days ago
D. Time-based and boolean-based: This option involves two techniques that are relevant to the described scenario. Time-based SQL injection is used to measure response time to determine true or false conditions, which fits Jane's requirements. Boolean-based SQL injection is used to send an SQL query that can be evaluated in a true or false context, which also matches what Jane is attempting to achieve.
upvoted 1 times
...
LordXander
1 month, 4 weeks ago
Selected Answer: D
well...it has the time word and the true and false wards...there's only 1 option that has both
upvoted 1 times
...
Shubh_shana
2 months, 2 weeks ago
chat GPT says option C i am really confused . anyone pls correct that problem
upvoted 1 times
...
insaniunt
4 months, 3 weeks ago
Selected Answer: D
D. Time-based and boolean-based
upvoted 2 times
...
581777a
9 months, 2 weeks ago
Selected Answer: D
Time-based SQL Injection: This technique involves causing the database to delay its response, allowing the attacker to infer information based on the response time. By injecting malicious SQL code that includes time-delay functions (such as WAITFOR DELAY in Microsoft SQL Server or SLEEP() in MySQL), the attacker can observe whether the web application's response time changes, indicating a successful injection. Union-based SQL Injection: This technique involves exploiting a vulnerability in the SQL query to manipulate the structure of the query and retrieve data from other database tables. The attacker uses the UNION SQL operator to combine the results of their malicious query with the original query, extracting data from different tables and columns. The attacker can use boolean conditions to test whether certain conditions are true or false.
upvoted 2 times
...
angellorv
10 months, 4 weeks ago
Answer B (Union-based and error base - sub category of IN-BAND SQLinjection) https://www.acunetix.com/websitesecurity/sql-injection2/ Union-based SQLi: leverages the UNION SQL operator to combine the results of two or more SELECT statements into a single result which is then returned as part of the HTTP response
upvoted 1 times
...
Vincent_Lu
11 months, 1 week ago
D. Time-based and boolean-based
upvoted 2 times
...
victorfs
1 year ago
Selected Answer: D
The correct option is D. D. Time-based and boolean-based
upvoted 3 times
...
Muli_70
1 year ago
C. Time-based and union-based Time-based injection would allow her to test the response time of a true or false response. Union-based injection would allow her to use a second command to determine whether the database will return true or false results for user IDs.
upvoted 2 times
...
sTaTiK
1 year ago
Selected Answer: D
Time-based cuz is blind and yes or no its boolean.
upvoted 2 times
...
sausageman
1 year, 1 month ago
Selected Answer: D
D. Time-based and boolean-based
upvoted 3 times
...
jeremy13
1 year, 1 month ago
Selected Answer: D
D. Time-based and boolean-based like 312-50V11 Q182
upvoted 4 times
...
eli117
1 year, 1 month ago
Selected Answer: A
A. Out of band and boolean-based. Out of band SQL injection involves using an out-of-band (OOB) channel to communicate with the attacker's system. The attacker typically uses this method when the vulnerable application is unable to retrieve data from the database and display it on the web page. The OOB channel can be used to retrieve the data from the database and send it to the attacker's system. Boolean-based SQL injection involves using true or false conditions to infer information about the database. This method involves injecting SQL statements that force the database to return a true or false response, depending on whether the statement is correct or not. By analyzing the response, an attacker can determine whether the injected SQL statement was executed or not.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...