gs gs116 Developing with SQL Server - SQL Injection - Quiz No.1
gs gs116 Microsoft SQL Server Quiz
This quiz belongs to book/course code gs gs116 Microsoft SQL Server of gs organization. We have 100 quizzes available related to the book/course Microsoft SQL Server. This quiz has a total of 10 multiple choice questions (MCQs) to prepare and belongs to topic Developing with SQL Server. NVAEducation wants its users to help them learn in an easy way. For that purpose, you are free to prepare online MCQs and quizzes.
NVAEducation also facilitates users to contribute in online competitions with other students to make a challenging situation to learn in a creative way. You can create one to one, and group competition on an topic of a book/course code. Also on NVAEducation you can get certifications by passing the online quiz test.
Question 1: SQL injection is an attack in which _________ code is inserted into strings that are later passed to an instance of SQL Server.
malicious
redundant
clean
non malicious
Question 2: Point out the correct statement.
Parameterized data cannot be manipulated by a skilled and determined attacker
Procedure that constructs SQL statements should be reviewed for injection vulnerabilities
The primary form of SQL injection consists of indirect insertion of code
None of the mentioned
Question 3: Which of the following script is example of SQL injection attack?
var Shipcity; ShipCity = Request.form ("ShipCity"); var sql = "select * from OrdersTable where ShipCity = '" + ShipCity + "'"; var Shipcity; ShipCity = Request.form ("ShipCity"); var Shipcity; var sql = "select * from OrdersTable where ShipCity = '" + ShipCity + "'";
All of the mentioned
Question 4: Any user-controlled parameter that gets processed by the application includes vulnerabilities like ___________
Host-related information
Browser-related information
Application parameters included as part of the body of a POST request
All of the mentioned
Question 5: Point out the wrong statement.
SQL injection vulnerabilities occur whenever input is used in the construction of an SQL query without being adequately constrained or sanitized
SQL injection allows an attacker to access the SQL servers and execute SQL code under the privileges of the user used to connect to the database
The use of PL-SQL opens the door to these vulnerabilities
None of the mentioned
Question 6: Which of the stored procedure is used to test the SQL injection attack?
xp_write
xp_regwrite
xp_reg
all of the mentioned
Question 7: If xp_cmdshell has been disabled with sp_dropextendedproc, we can simply inject the following code?
sp_addextendedproc ‘xp_cmdshell’,’xp_log70.dll’
sp_addproc ‘xp_cmdshell’,’xp_log70.dll’
sp_addextendedproc ‘xp_cmdshell’,’log70.dll’
none of the mentioned
Question 8: Which of the following code can enable xp_cmdshell?
master..sp_configure 'show advanced options',1 reconfigure master..sp_configure 'xp_cmdshell',1 reconfigure master..sp_configure 'show advanced options',1 configure master..sp_configure 'xp_cmdshell',1 configure master..sp_reconfigure 'show advanced options',1 reconfigure master..sp_reconfigure 'xp_cmdshell',1 reconfigure
All of the mentioned
Question 9: Which of the following script is an example of Quick detection in the SQL injection attack?
SELECT loginame FROM master..sysprocesses WHERE spid = @@SPID
For integer inputs : convert(int,@@version)
IF condition true-part ELSE false-part (S)
SELECT header, txt FROM news UNION ALL SELECT name, pass FROM members
Question 10: _______________ is time based SQL injection attack.
Quick detection
Initial Exploitation
Blind SQL Injection
Inline Comments
Online Quizzes of gs116 Microsoft SQL Server
Developing with SQL Server - Error Handling - Quiz No.1
gs gs116
Microsoft SQL Server Online Quizzes
Laying the Foundation - Aggregation of Data - Quiz No.1
gs gs116
Microsoft SQL Server Online Quizzes
Laying the Foundation - Joins in SQL Server - Quiz No.1
gs gs116
Microsoft SQL Server Online Quizzes
Laying the Foundation - Views in SQL Server - Quiz No.1
gs gs116
Microsoft SQL Server Online Quizzes
