In _____ injection, the attacker uses the same communication channel to launch the attack and collect results.
Answer
in-band
Explanation
### Why this is right
In-band injection uses the same channel for sending the attack and receiving its results. The name describes the communication arrangement, not the specific database product.
### The concept
Out-of-band injection uses a separate channel to obtain results, which may be useful when direct communication is restricted. Blind injection is different: the attacker infers results from application behavior instead of directly viewing them.
### Terms
- **In-band injection**: an injection attack that uses one communication channel for attack and results.
- **Out-of-band injection**: an injection attack that uses a different channel for results.
- **Blind injection**: an attack where information is inferred from behavior rather than directly shown.
### Remember
Same channel means in-band; a separate channel means out-of-band.
Related Questions
- A database-backed application needs to stop showing detailed database errors to ordinary users while retaining information for investigation. Which approach best matches the lesson?(intermediate)
- Regular security audits and penetration tests can help identify and fix application weaknesses before attackers exploit them.(basic)
- A Web Application Firewall (WAF) should be treated as a replacement for secure query construction.(basic)
- A database account should have only the permissions required for its task. This is the principle of _____.(basic)
- In blind Structured Query Language (SQL) injection, the attacker cannot directly see the result and instead infers information from application behavior.(basic)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free