SQL and Buffer Overflow Quiz

What does SQL stand for?

• Structured Query Language

• Simple Query Language

• Sequential Query Language

• Structured Query Language

What is SQL injection?

• An attack that exploits vulnerabilities in network protocols

• A technique to bypass firewalls

• A code injection technique exploiting a vulnerability in the database layer

• A method to steal passwords

Which of the following is NOT a common objective of SQL injection attacks?

• Accessing personal information

• Changing operating system settings

• Retrieving credit card numbers

• Bypassing login credentials

How do attackers typically perform an SQL injection attack?

• By exploiting network bandwidth

• By sending oversized ICMP packets

• By inserting malicious code into web forms or website code

• By exploiting software vulnerabilities

What is a common way to test for SQL injection vulnerabilities?

• Using network sniffers

• Entering a single quote into input fields

• Sending malformed packets

• Flooding the server with requests

Which SQL command might an attacker use to retrieve data from a database?

• DELETE

• UPDATE

• INSERT

• SELECT

What does the ‘--’ symbol do in an SQL injection?

• Comments out the rest of the SQL command

• Ends the SQL statement

• Adds a new field to the database

• Initiates a new SQL command

In SQL injection, what is a 'blind' SQL injection?

Which type of input validation can help prevent SQL injection attacks?

• Sanitizing user input

• Disabling all SQL commands

• Using longer text boxes

• Ignoring numeric values

What should be done to prevent SQL error messages from aiding attackers?

• Modify error reports to not display SQL errors to outside users

• Display all errors for debugging purposes

• Use encrypted error messages

• Redirect errors to a different server