MENU
Elliot is in the process of exploiting a web application that uses SQL as a back-end database. He's determined that the application is vulnerable to SQL injection, and has introduced conditional timing delays into injected queries to determine whether they are successful. What type of SQL injection is Elliot most likely performing?
Suggested Answer: B
Get Premium 312-50 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
JU
Justine
12 months ago
Pretty sure it's not NoSQL injection, that's a different beast.
FL
Floyd
12 months ago
Surprised it's not Union-based! Timing makes it blind.
GE
Geoffrey
12 months ago
Yeah, it's blind for sure. No visible errors to exploit.
RO
Roxane
1 year ago
I thought it was error-based? Seems like a tricky one.
RO
Ronny
1 year ago
Definitely Blind SQL injection. Timing delays are a giveaway.
GA
Gayla
1 year ago
I feel like it could be union-based as well, but the timing aspect really points more towards blind SQL injection.
ET
Ettie
1 year ago
This sounds like blind SQL injection to me too, especially since he's not getting any direct feedback from the application.
SH
Sherell
1 year ago
I think this might be blind SQL injection since he's using timing delays to check for successful queries.
JA
Jacquelyne
1 year ago
I'm not entirely sure, but I remember something about error-based SQL injection being more about getting error messages.
HA
Hailey
1 year ago
Hmm, I'm a bit unsure about this one. I'll need to think through the different options and how they might impact the environment.
AL
Alverta
1 year ago
Okay, I remember learning about this in class. The Biba model is a formal security policy that defines access control rules to ensure data integrity. I'm pretty confident this is the right answer.
AN
Antonio
1 year ago
Okay, I think I've got this. The question is asking about the key areas that organizations should monitor for potential risks, except for one. I'll need to analyze each option to determine which one is the exception.