WAPT 2 - SQL

Which SQL clause is used to filter records in a database?

• SELECT

• WHERE

• ORDER BY

• GROUP BY

What does the `UNION` operator do in SQL?

• Combines data from two tables without duplicates

• Combines data from two or more SELECT statements

• Joins two tables based on a condition

• Deletes duplicate rows from a table

What is the primary function of the `information_schema` in SQL?

• It stores user credentials

• It holds metadata about the database

• It lists available functions in SQL

• It provides information on database performance

What is the purpose of the `LIMIT` clause in SQL?

• Restrict the columns returned

• Restrict the rows returned

• Limit the execution time of a query

• Limit the size of the database

What does the following SQL statement do? `SELECT column1, column2 FROM table1 ORDER BY column1 DESC;`

• Sorts the data in ascending order based on `column1`

• Sorts the data in descending order based on `column1`

• Filters data with descending values in `column1`

• Returns unique values of `column1`

What is Boolean-based Blind SQL Injection?

• Injection that exploits time delays

• Injection that retrieves data based on true/false responses

• Injection that outputs data directly

• Injection based on guessing column names

What is the result of this payload in Boolean-based SQL Injection? `1' AND 1=0#`

• Returns data from the database

• Does not return any data

• Causes an error

• Executes a delay

In Time-based Blind SQL Injection, how does an attacker gather information?

• By analyzing error messages

• By observing the application's response time

• By enumerating table names directly

• By using UNION SELECT

Which of the following payloads demonstrates Time-based Blind SQL Injection?

• `2' UNION SELECT 1#`

• `2' AND IF(1=1, SLEEP(5), 0)#`

• `1' ORDER BY 1#`

• `2' OR 1=1--`

Which SQL function is used to retrieve the database version?

• `database()`

• `user()`

• `version()`

• `schema()`