CyberCertPrepSecurity FundamentalsWeb Security BasicsEASYFree question
What is SQL injection?
- A.An attack where malicious SQL code is inserted into input fields to manipulate a database
- B.A method of optimizing database queries
- C.A tool for backing up SQL databases
- D.A way to encrypt data in a database
Why A is correct
SQL injection occurs when an attacker inserts malicious SQL statements into input fields (like login forms or search boxes) that are passed directly to a database query. This can allow attackers to bypass authentication, read sensitive data, modify or delete records, and even execute system commands.
Know someone studying for Security Fundamentals? Send them this one.