New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Alibaba ACP-Cloud1 Exam - Topic 2 Question 66 Discussion

Actual exam question for Alibaba's ACP-Cloud1 exam
Question #: 66
Topic #: 2
[All ACP-Cloud1 Questions]

SQL injection is a common attack on the application layer. It builds special input as a parameter to pass into a web application to steal or destroy the application dat

a. Which of the following is the target that SQL injection eventually destroys or steals from?

Show Suggested Answer Hide Answer
Suggested Answer: A, C

Contribute your Thoughts:

0/2000 characters
Gracia
3 months ago
Redis database? That's a weird option, not sure about that.
upvoted 0 times
...
Penney
3 months ago
Wait, are we sure it doesn't just mess with files?
upvoted 0 times
...
Lazaro
3 months ago
I think it can affect web apps too, right?
upvoted 0 times
...
Kip
4 months ago
Totally agree, it's all about the data!
upvoted 0 times
...
Diane
4 months ago
SQL injection targets databases primarily.
upvoted 0 times
...
Martina
4 months ago
I think SQL injection primarily targets the data stored in databases, so I would lean towards A. But I wonder if it could also involve confidential files.
upvoted 0 times
...
Jacqueline
4 months ago
I recall that SQL injections can affect databases, but I'm not sure if it's specifically about the Redis database or something else. Could it be B?
upvoted 0 times
...
Beatriz
4 months ago
I feel like this question is similar to one we practiced in class. I think the target is usually the web application's data, so maybe it's A?
upvoted 0 times
...
Glenn
5 months ago
I remember studying SQL injection, but I'm not entirely sure what the main target is. I think it might be the database, but I'm confused about the options.
upvoted 0 times
...
Elliott
5 months ago
I'm a little confused on this one. I know SQL injection is a way to attack web apps, but I'm not sure if the target is the web app itself or the data it's accessing. I'll have to review my notes on SQL injection before answering this.
upvoted 0 times
...
Edward
5 months ago
Okay, let me break this down. SQL injection is about injecting malicious SQL code to access or manipulate the database. So the target that gets destroyed or stolen would be the data in the database, not necessarily the web application itself. I'm going to go with C - confidential files on the server.
upvoted 0 times
...
Micaela
5 months ago
Hmm, I'm a bit unsure about this one. I know SQL injection is a way to attack web apps, but I'm not sure if it's specifically targeting the web app itself or the data it's accessing. I'll have to think this through a bit more.
upvoted 0 times
...
Mable
5 months ago
This is a pretty straightforward question. SQL injection is all about attacking the database, so the answer has to be A - web applications.
upvoted 0 times
...
Katheryn
5 months ago
I'm pretty confident the answer is A - web applications. SQL injection is all about exploiting vulnerabilities in the web application code to gain unauthorized access to the underlying database. The goal is to steal or destroy the application data, not necessarily any specific files or databases.
upvoted 0 times
...
Aja
5 months ago
I'm leaning towards option A - using a rigorous approval process for the detailed specifications. That seems like the safest approach given the high-risk nature of the project.
upvoted 0 times
...
Fredric
9 months ago
Wait, are we sure it's not A? I mean, the question does say 'the application layer'. Oh well, C sounds like the safest bet to me.
upvoted 0 times
Cary
8 months ago
C) Confidential files on the server it is then.
upvoted 0 times
...
Alex
8 months ago
Yeah, I'm going with C) Confidential files on the server too.
upvoted 0 times
...
Rosenda
8 months ago
I agree, C) Confidential files on the server seems like the most likely target.
upvoted 0 times
...
Chanel
8 months ago
I think it's C) Confidential files on the server.
upvoted 0 times
...
...
Casie
10 months ago
Hmm, B? A Redis database? That's a bit specific. I'd go with C. SQL injection is about getting to the core data, not just messing with the web app.
upvoted 0 times
Stefany
8 months ago
Yeah, messing with a Redis database seems too specific. C is more in line with the goal of SQL injection.
upvoted 0 times
...
Stephanie
8 months ago
I agree, SQL injection aims to steal or destroy important data, so C makes sense.
upvoted 0 times
...
Emilio
8 months ago
I think C is the right answer. SQL injection targets confidential files on the server.
upvoted 0 times
...
...
Leah
10 months ago
Haha, D? Really? Stealing pictures? I don't think that's the main goal of SQL injection attacks. It's all about the juicy, confidential data, got to be C.
upvoted 0 times
Telma
9 months ago
C) Confidential files on the server
upvoted 0 times
...
Abraham
9 months ago
B) Redis database
upvoted 0 times
...
Thea
9 months ago
A) Web applications
upvoted 0 times
...
...
Sommer
10 months ago
Definitely C. SQL injection is a way for attackers to gain unauthorized access to the server's internal data, not just the web application itself.
upvoted 0 times
Cathern
10 months ago
That's correct. SQL injection can be used to access and steal confidential files on the server.
upvoted 0 times
...
Cathern
10 months ago
C) Confidential files on the server
upvoted 0 times
...
...
Desmond
10 months ago
I think the answer is C. SQL injection is all about stealing or destroying the application's data, which would be the confidential files on the server.
upvoted 0 times
...
Margret
11 months ago
I believe SQL injection can also target confidential files on the server, not just web applications.
upvoted 0 times
...
Shelton
11 months ago
I agree with Glory, SQL injection can steal or destroy data from web applications.
upvoted 0 times
...
Glory
11 months ago
I think the target of SQL injection is web applications.
upvoted 0 times
...

Save Cancel