Alibaba Exam ACP-Cloud1 Topic 2 Question 66 Discussion

Actual exam question for Alibaba's ACP-Cloud1 exam

Question #: 66
Topic #: 2

SQL injection is a common attack on the application layer. It builds special input as a parameter to pass into a web application to steal or destroy the application dat

a. Which of the following is the target that SQL injection eventually destroys or steals from?

AWeb applications

BRedis database

CConfidential files on the server

DPictures on the server

Show Suggested Answer

Suggested Answer: A, C

by Yuette at Aug 26, 2024, 09:37 AM

Limited Time Offer

25%

Off

Get Premium ACP-Cloud1 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Fredric

2 months ago

Wait, are we sure it's not A? I mean, the question does say 'the application layer'. Oh well, C sounds like the safest bet to me.

upvoted 0 times

Cary

8 days ago

C) Confidential files on the server it is then.

upvoted 0 times

...

Alex

9 days ago

Yeah, I'm going with C) Confidential files on the server too.

upvoted 0 times

...

Rosenda

10 days ago

I agree, C) Confidential files on the server seems like the most likely target.

upvoted 0 times

...

Chanel

12 days ago

I think it's C) Confidential files on the server.

upvoted 0 times

...

Casie

2 months ago

Hmm, B? A Redis database? That's a bit specific. I'd go with C. SQL injection is about getting to the core data, not just messing with the web app.

upvoted 0 times

Stefany

27 days ago

Yeah, messing with a Redis database seems too specific. C is more in line with the goal of SQL injection.

upvoted 0 times

...

Stephanie

1 months ago

I agree, SQL injection aims to steal or destroy important data, so C makes sense.

upvoted 0 times

...

Emilio

1 months ago

I think C is the right answer. SQL injection targets confidential files on the server.

upvoted 0 times

...

Leah

2 months ago

Haha, D? Really? Stealing pictures? I don't think that's the main goal of SQL injection attacks. It's all about the juicy, confidential data, got to be C.

upvoted 0 times

Telma

1 months ago

C) Confidential files on the server

upvoted 0 times

...

Abraham

1 months ago

B) Redis database

upvoted 0 times

...

Thea

2 months ago

A) Web applications

upvoted 0 times

...

Sommer

3 months ago

Definitely C. SQL injection is a way for attackers to gain unauthorized access to the server's internal data, not just the web application itself.

upvoted 0 times

Cathern

2 months ago

That's correct. SQL injection can be used to access and steal confidential files on the server.

upvoted 0 times

...

Cathern

3 months ago

C) Confidential files on the server

upvoted 0 times

...

Desmond

3 months ago

I think the answer is C. SQL injection is all about stealing or destroying the application's data, which would be the confidential files on the server.

upvoted 0 times

...