Exam 312-50v11 topic 1 question 351 discussion

Actual exam question from ECCouncil's 312-50v11

Question #: 351
Topic #: 1

This type of injection attack does not show any error message. It is difficult to exploit as it returns information when the application is given SQL payloads that elicit a true or false response from the server. By observing the response, an attacker can extract sensitive information.
What type of attack is this?

A. Union SQL injection
B. Error-based SQL injection
C. Time-based SQL injection
D. Blind SQL injection

Show Suggested Answer

Suggested Answer: D 🗳️

by jinjection at Sept. 28, 2021, 8:50 a.m.

Comments

Submit Cancel

Daniel8660

8 months ago

Selected Answer: D

Blind/Inferential SQL Injection Boolean-based blind SQL injection (sometimes called inferential SQL Injection) is performed by asking the right questions to the application database.Multiple valid statements evaluated as true or false are supplied in the affected parameter in the HTTP request. (P.2044/2028)

upvoted 3 times

...

Osen

1 year, 8 months ago

D correct. Blind SQL (Structured Query Language) injection is a type of SQL Injection attack that asks the database true or false questions and determines the answer based on the applications response.

upvoted 3 times

...

jinjection

1 year, 8 months ago

D correct

upvoted 2 times

...