Exam 312-50v11 topic 1 question 135 discussion

Out-of-band SQL injection occurs when an attacker is unable to use the same channel to launch the attack and gather results. ... Out-of-band SQLi techniques would rely on the database server's ability to make DNS or HTTP requests to deliver data to an attacker.

A. Stealth virus: It's a type of malicious software that can change its own code to avoid being detected by antivirus programs. It can also alter its encryption or hash values when infecting files, making it hard to detect using simple virus signature methods. B. Tunneling virus: Used in network attacks, but doesn't change its own code or encrypt itself multiple times. C. Cavity virus: Infects by using empty areas in files, but doesn't explicitly mention changing its own code multiple times or encrypting itself during replication. D. Encryption virus: Encrypts parts of infected files to avoid detection, but doesn't refer to the virus changing its own code multiple times during replication.

Types of SQL Injection Out-of-Band SQL Injection Attacker needs to communicate with the server and acquire features of the database server used by the web application.Attackers use DNS and HTTP requests to retrieve data from the database server. (P.2046/2030)

(C) id the correct answer. Out-of-band SQLi techniques would rely on the database server's ability to make DNS or HTTP requests to deliver data to an attacker.

correct