ITPEC FE Morning October 2020 Question 38
ITPEC FE Morning October 2020 — Question 38 of 80
SQL Injection — identify the correct definition among similar web attacks.
SQL injection inserts malicious SQL commands through a web application's input fields to access or modify database data without authorization.
Why not others:
- (b) — describes a worm exploiting DBMS vulnerabilities to spread infections (e.g., SQL Slammer)
- (c) — describes XSS (Cross-Site Scripting): malicious script runs in the visitor's browser
- (d) — describes CSRF (Cross-Site Request Forgery): visitor unknowingly performs actions on another site
Key distinction:
- SQL Injection → targets the database via malicious queries
- XSS → targets the browser via malicious scripts
- CSRF → targets the user's session via forged requests
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official FE past-paper collection or Report an issue.