In SQL injection, what is the purpose of injecting malicious SQL code?
- Allowing remote code execution
- Bypassing authentication
- Modifying database records
- Retrieving sensitive information
The purpose of injecting malicious SQL code in SQL injection attacks is primarily to retrieve sensitive information from the database, such as usernames, passwords, or other confidential data.
Loading...
Related Quiz
- In SQL query testing, what is meant by "query validation"?
- Scenario: During a test project, you notice that the test execution coverage is low, and defects are being discovered late in the testing process. Which action should be taken based on these metrics?
- Which aspect of database performance can profiling tools help identify and improve?
- Which SQL statement is most commonly exploited in SQL injection attacks?
- What is the difference between data-driven testing and keyword-driven testing in the context of database automation frameworks?