Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam 312-50v11 topic 1 question 182 discussion

Actual exam question from ECCouncil's 312-50v11
Question #: 182
Topic #: 1
[All 312-50v11 Questions]

Ethical hacker Jane Smith is attempting to perform an SQL injection attack. She wants to test the response time of a true or false response and wants to use a second command to determine whether the database will return true or false results for user IDs.
Which two SQL injection types would give her the results she is looking for?

  • A. Out of band and boolean-based
  • B. Union-based and error-based
  • C. Time-based and union-based
  • D. Time-based and boolean-based
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
noosa0707
Highly Voted 2 years, 3 months ago
Selected Answer: D
Guys when you find a mistake and want to post the correct answer, please try to write a voting comment. This will help distinguish the correct answer from the wrong answer in the selection section.
upvoted 22 times
...
cerzocuspi
Highly Voted 3 years ago
D. Time-based and boolean-based
upvoted 21 times
...
itsrjbae
Most Recent 3 months ago
Selected Answer: D
D. Time-based and boolean-based
upvoted 1 times
...
CHCHCHC
8 months, 2 weeks ago
Selected Answer: D
Time-based Injection: This type of SQL injection involves introducing a delay in the SQL query's execution to observe if there's a delay in the server's response. By injecting malicious code that causes a delay, the attacker can infer whether a true condition is met or not based on the delay in the server's response. If the response time is significantly different, it can indicate the success of the injected condition. Union-based Injection: Union-based injection involves exploiting SQL queries that use the UNION SQL operator to combine results from multiple SELECT statements. By injecting a crafted UNION query, the attacker can combine their own query results with the original query's results. This can help the attacker retrieve additional data or test conditions based on the structure of the query.
upvoted 3 times
CHCHCHC
8 months, 2 weeks ago
sorry i have put union based , it is boolean-based. it is a type of blind SQL injection that relies on the number of rows returned by a query. If the database returns no rows for a true result, but one or more rows for a false result, the hacker can use this to determine whether the user ID exists in the database.
upvoted 2 times
...
...
alismaini
9 months ago
Selected Answer: D
it is time based and boolean based
upvoted 1 times
...
Naveen0x
9 months, 1 week ago
Selected Answer: D
In an error-based SQLi, the attacker sends SQL queries to the database to cause errors and then monitors error messages displayed by the database server. This lets the attacker obtain information about the structure of the database. In some cases, error-based SQL injection alone is enough for an attacker to enumerate an entire database. In a boolean-based SQL injection, the attacker sends SQL queries to the database, which force the application to return a different result depending on whether the query returns a true or false result. Depending on the result, the content of the HTTP response will change or remain the same. This allows an attacker to know if the result is true or false, even though no data from the database is returned.
upvoted 1 times
...
ThoHNguyen
9 months, 3 weeks ago
Selected Answer: D
D. Time-based and boolean-based
upvoted 1 times
...
victorfs
11 months, 3 weeks ago
Selected Answer: D
The correct óptimo is D: Time-based and boolean-based
upvoted 1 times
...
Cokamaniako
1 year, 2 months ago
Selected Answer: D
1.-Time delay SQL injection (sometimes called time-based SQL injection) evaluates the time delay that occurs in response to true or false queries sent to the database. A waitfor statement stops the SQL server for a specific amount of time. Based on the response, an attacker will extract information such as connection time to the database as the system administrator or as another user and launch further attack 2.-Boolean-based blind SQL injection (sometimes called inferential SQL Injection) is performed by asking the right questions to the application database. Multiple valid statements evaluated as true or false are supplied in the affected parameter in the HTTP request
upvoted 4 times
...
Yebi
1 year, 3 months ago
Selected Answer: D
Answer is D, time based and boolean based
upvoted 2 times
...
Examdaddy69
1 year, 3 months ago
Selected Answer: D
D is correct
upvoted 1 times
...
kiki533
1 year, 5 months ago
D is correct
upvoted 1 times
...
Daniel8660
1 year, 6 months ago
Selected Answer: D
Blind/Inferential SQL Injection time-based SQL injection evaluates the time delay that occurs in response to true or false queries sent to the database. Boolean-based blind SQL injection is performed by asking the right questions to the application database. (P.2042-2044)
upvoted 5 times
...
CosmosNV
1 year, 6 months ago
Selected Answer: D
D.Time-based and boolean-based, is the answer
upvoted 2 times
...
sn30
1 year, 7 months ago
Selected Answer: D
Answer is D, time based and boolean based
upvoted 1 times
...
Fedrehopsu
1 year, 8 months ago
Selected Answer: D
Time and Boolean
upvoted 1 times
...
CybeXRay
1 year, 9 months ago
Selected Answer: D
Time-based and boolean-based
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...