Exam 312-50v10 topic 1 question 237 discussion

Actual exam question from ECCouncil's 312-50v10

Question #: 237
Topic #: 1

Elliot is in the process of exploiting a web application that uses SQL as a back-end database. He is determined that the application is vulnerable to SQL injection and has introduced conditional timing delays into injected queries to determine whether they are successful. What type of SQL injection is Elliot most likely performing?

A. NoSQL injection
B. Blind SQL injection
C. Union-based SQL injection
D. Error-based SQL injection

Show Suggested Answer

Suggested Answer: B 🗳️

by TrendMicroDLPSSucks at Aug. 21, 2020, 7:07 a.m.

Comments

Submit Cancel

mr_najbolji

12 months ago

Elliot from MR. ROBOT?

upvoted 4 times

czarul79

8 months, 3 weeks ago

We love you Elliot and MR.ROBOT, too.

upvoted 2 times

...

TrendMicroDLPSSucks

1 year, 2 months ago

Blind SQL injection is a type of SQL injection attack where the attacker indirectly discovers information by analyzing server reactions to injected SQL queries, even though injection results are not visible. Blind SQL injection attacks are used against web applications that are vulnerable to SQL injection but don’t directly reveal information. While more time-consuming than regular SQL injection, blind SQL injection attacks can be automated to map out the database structure and extract sensitive information from the database server.

upvoted 1 times

...

Exam 312-50v10 All Questions

View all questions & answers for the 312-50v10 exam

Exam 312-50v10 topic 1 question 237 discussion

Comments

mr_najbolji

czarul79

TrendMicroDLPSSucks

SY0-701