The lesson recommends running SQLMap against public systems without permission if the tester is a student.

### Why this is right The lesson explicitly warns against using these techniques on individuals, companies, or educational institutions without authorization. It directs students to use virtual machines for practice. ### The concept A security tool can be used for legitimate testing or for harmful access. Permission and scope determine whether a test is authorized. A deliberately vulnerable lab provides a controlled target where students can learn without attacking a real organization. ### The other options - **True**: this is incorrect because student status does not grant permission to test systems belonging to others. ### Terms - **SQLMap**: a tool that automates testing for SQL injection weaknesses. - **Virtual machine**: a software-based computer that runs in an isolated environment. - **Authorization**: explicit permission to perform a security test. ### Remember Only test systems you own or have explicit permission to assess.