Computer Security Applicationsintermediate
Select ALL statements that accurately distinguish the three Structured Query Language (SQL) injection types described in the lesson.
Answer
In-band injection uses the same communication channel to launch the attack and collect results, Out-of-band injection uses a different channel to launch the attack and collect results, Blind injection relies on application behavior when results are not directly visible
Explanation
### Why this is right
- **A** is correct: in-band describes using one channel for the attack and its results.
- **B** is correct: out-of-band describes using separate channels.
- **C** is correct: blind injection relies on observable application behavior when direct results are unavailable.
### The concept
These labels describe result communication, not different databases. An attacker may be able to infer information even when a page does not display query output. The communication channel is the path used to send requests or receive information.
### The other options
- **D. Blind injection always requires the attacker to see the query results directly**: this contradicts the defining feature of blind injection.
- **E. In-band injection means the database is disconnected from the application**: in-band concerns the communication channel, not whether the database is connected.
### Terms
- **SQL**: Structured Query Language, a language for relational databases.
- **Communication channel**: the path through which an attack request or result is sent.
### Remember
Classify injection types by how results reach the attacker.
Related Questions
- A database-backed application needs to stop showing detailed database errors to ordinary users while retaining information for investigation. Which approach best matches the lesson?(intermediate)
- Regular security audits and penetration tests can help identify and fix application weaknesses before attackers exploit them.(basic)
- A Web Application Firewall (WAF) should be treated as a replacement for secure query construction.(basic)
- A database account should have only the permissions required for its task. This is the principle of _____.(basic)
- In blind Structured Query Language (SQL) injection, the attacker cannot directly see the result and instead infers information from application behavior.(basic)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free