SQL Injection

 

#cybersecurity #coursera #quiz #solution #network #hacking #IBM

1.

Question 1

A hacker tailoring his actions based on the database errors the application displays is an example of which type of SQL Injection attack?

1 / 1 point

Error-based

UNION-based

Out of Band

Blind injection

Correct

Correct, error-based

2.

Question 2

True or False: Use of prepared statements is an effective mitigation against SQL Injection attacks because it seperates the query structure from the query parameters.

1 / 1 point

True

False

Correct

Correct, Use of prepared statements is an effective mitigation against SQL Injection attacks because it seperates the query structure from the query parameters.

3.

Question 3

True or False: Native database errors should be hidden from the user to prevent hackers from gaining insight into the internal structure of your application.

1 / 1 point

True

False

Correct

Correct, Native database errors should be hidden from the user to prevent hackers from gaining insight into the internal structure of your application.

4.

Question 4

True or False: The use of object-relational mapping (ORM) libraries is a dangerous practice that can help hackers conduct successful SQL Injection attacks.

1 / 1 point

True

False

Correct

Correct, The use of object-relational mapping (ORM) libraries is not a dangerous practice that can help hackers conduct successful SQL Injection attacks.