Free 312-50V13 Web TestEngine Demo

Exit VCEDump 312-50V13 EC-Council Certified Ethical Hacker (C|EH v13)

Q53 Single choice

A penetration tester is assessing a web application that uses dynamic SQL queries for searching users in the database. The tester suspects the search input field is vulnerable to SQL injection.

What is the best approach to confirm this vulnerability?

A
Input DROP TABLE users; -- into the search field to test if the database query can be altered
B
Inject JavaScript into the search field to test for Cross-Site Scripting (XSS)
C
Use a directory traversal attack to access server configuration files
D
Perform a brute-force attack on the user login page to guess weak passwords

Previous Check answer

Question map53 / 100

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100

Current Correct Answered Incorrectly Reviewed 0 Remaining 100

Marked Questions0

No marked questions.

Answered Incorrectly0

No incorrect answers.

312-50V13 Web TestEngine demo