Multiple choice technology security

Which of the following statements does NOT describe SQL Injection?

  1. SQL Injection is a type of security exploit in which the attacker is able to call built-in stored procedures

  2. SQL Injection attack technique forces a web site to echo client-supplied data, which executes in a user's web browser

  3. SQL Injection is a type of security exploit in which the attacker adds SQL statements in the user input

  4. SQL Injection attacks allow a malicious individual to execute undesired SQL statements
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Forcing a website to echo client-supplied data that executes in a user's browser describes Cross-Site Scripting (XSS), not SQL Injection. The other options accurately describe characteristics and capabilities of SQL Injection, such as executing undesired statements or stored procedures.

Keep practicing — related questions