Threats & AttacksCâu 8 / 100
Which attack injects malicious database commands through unvalidated user input fields?
a.Cross-site scripting
b.SQL injection
c.Directory traversal
d.Session hijacking
Giải thích
SQL injection inserts crafted database statements through input that the application fails to sanitize. It can expose, modify, or delete data. Parameterized queries and input validation are the primary defenses.
Luyện miễn phí toàn bộ 100 câu hỏi — không cần đăng ký.
Câu hỏi liên quan cùng chủ đề
- An attacker overwhelms a web server with traffic from thousands of compromised devices, making it unavailable. What is this called?
- Which type of threat actor is typically well-funded, highly skilled, and motivated by espionage on behalf of a government?
- A disgruntled employee copies confidential designs to a USB drive before resigning. This is an example of what threat?
- An attacker leaves infected USB drives in a company parking lot hoping employees will plug them in. This technique is known as:
- Which malware disguises itself as legitimate software but performs malicious actions once installed?
- A malicious program spreads across a network automatically without any user interaction. What is it?
Cập nhật gần nhất: · quy trình kiểm tra
Đội Ngũ Biên Tập PrepPass · Đối chiếu với CompTIA Security+ (SY0-701) · Quy trình kiểm tra