A Structured Query Language (SQL) injection attack can affect confidentiality, integrity, or availability of data.

### Why this is right The lesson explains that an attacker may access data, change it, or make it unavailable. Those outcomes correspond to confidentiality, integrity, and availability concerns. ### The concept Confidentiality concerns preventing unauthorized access, integrity concerns preventing unauthorized changes, and availability concerns keeping systems and data usable. An injection flaw can threaten one or more of these properties depending on the attack and the permissions available. ### The other options - **False**: this is incorrect because the lesson describes access, modification, and unavailability as possible consequences. ### Terms - **SQL**: Structured Query Language, used for database operations. - **Confidentiality**: protection against unauthorized disclosure. - **Integrity**: protection against unauthorized or improper changes. - **Availability**: ability of authorized users to access systems and data when needed. ### Remember Consider all three security properties when assessing an injection flaw.