Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Eccouncil 312-50 Exam - Topic 4 Question 10 Discussion

Elliot is in the process of exploiting a web application that uses SQL as a back-end database. He's determined that the application is vulnerable to SQL injection, and has introduced conditional timing delays into injected queries to determine whether they are successful. What type of SQL injection is Elliot most likely performing?
B) Blind SQL injection
A) Error-based SQL injection
C) Union-based SQL injection
D) NoSQL injection

Eccouncil 312-50 Exam - Topic 4 Question 10 Discussion

Actual exam question for Eccouncil's 312-50 exam
Question #: 10
Topic #: 4
[All 312-50 Questions]

Elliot is in the process of exploiting a web application that uses SQL as a back-end database. He's determined that the application is vulnerable to SQL injection, and has introduced conditional timing delays into injected queries to determine whether they are successful. What type of SQL injection is Elliot most likely performing?

Show Suggested Answer Hide Answer
Suggested Answer: B

by Elza at May 07, 2022, 10:47 PM

Limited Time Offer

25%

Off

Get Premium 312-50 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Justine
10 months ago
Pretty sure it's not NoSQL injection, that's a different beast.
upvoted 0 times
...
Floyd
10 months ago
Surprised it's not Union-based! Timing makes it blind.
upvoted 0 times
...
Geoffrey
10 months ago
Yeah, it's blind for sure. No visible errors to exploit.
upvoted 0 times
...
Roxane
11 months ago
I thought it was error-based? Seems like a tricky one.
upvoted 0 times
...
Ronny
11 months ago
Definitely Blind SQL injection. Timing delays are a giveaway.
upvoted 0 times
...
Gayla
11 months ago
I feel like it could be union-based as well, but the timing aspect really points more towards blind SQL injection.
upvoted 0 times
...
Ettie
11 months ago
This sounds like blind SQL injection to me too, especially since he's not getting any direct feedback from the application.
upvoted 0 times
...
Sherell
11 months ago
I think this might be blind SQL injection since he's using timing delays to check for successful queries.
upvoted 0 times
...
Jacquelyne
11 months ago
I'm not entirely sure, but I remember something about error-based SQL injection being more about getting error messages.
upvoted 0 times
...
Hailey
11 months ago
Hmm, I'm a bit unsure about this one. I'll need to think through the different options and how they might impact the environment.
upvoted 0 times
...
Alverta
11 months ago
Okay, I remember learning about this in class. The Biba model is a formal security policy that defines access control rules to ensure data integrity. I'm pretty confident this is the right answer.
upvoted 0 times
...
Antonio
11 months ago
Okay, I think I've got this. The question is asking about the key areas that organizations should monitor for potential risks, except for one. I'll need to analyze each option to determine which one is the exception.
upvoted 0 times
...

Save Cancel