A security analyst tries to verify a blind SQL injection in an automated scanner results by manually inserting the SQL queries in the suspected parameter/field. Which of the following SQL query may successfully confirm the SQL injection vulnerability in the parameter that was detected by the automated scanner to be vulnerable?

Blind SQL injection reveals no data in responses, so testers use time-based techniques like WAITFOR DELAY (SQL Server) or sleep() (MySQL) to confirm vulnerability. If injection succeeds, the delay occurs. Options C and D work in reflected injection where results appear in page output. Option B causes errors regardless. Time-based observation (A) is definitive for blind scenarios.