16. SQL Injection Tutorial Quiz

What is the primary target of an SQL injection attack?

• A web server

• A SQL database

• A firewall

• A network router

What is the purpose of the application 'dvwa' used in the tutorial?

• To encrypt data

• To manage web servers

• To test SQL injection skills

• To secure databases

What does the single quote (') signify in SQL injection attacks?

• End of a string

• Start of a comment

• End of a command

• Start of a new line

What response indicates that the application is vulnerable to SQL injection?

• Server timeout

• Page not found

• Access denied

• Error in SQL syntax

What does the SQL query '1' OR '1'='1' aim to achieve?

• Delete data

• Return true

• Update data

• Return false

What is the significance of the 'Union' command in SQL injection?

• To update data

• To delete data

• To combine results from multiple queries

• To create a new table

Which SQL query can be used to retrieve the version of the SQL database server?

• SELECT VERSION()

• SELECT * FROM version

• DESCRIBE version

• SHOW DATABASES

What does the 'information_schema' table contain?

• Application logs

• User passwords

• Database metadata

• Network configurations

What is the purpose of reviewing web server logs in the context of SQL injection?

• To find user passwords

• To identify SQL injection attempts

• To update the database

• To delete logs

What does the percent encoding '%27' represent in web server logs?

• Space

• Single quote

• Ampersand

• Double quote