PCI SSCPCI DSSVulnerability MgmtEASYFree question
What is SQL injection and why is it relevant to PCI DSS?
- A.An attack where malicious SQL code is inserted into application queries, potentially allowing unauthorized access to cardholder data in databases
- B.An attack where a rogue access point is placed on the store network, potentially allowing a listener to capture card data sent over the wireless link
- C.A flaw where session tokens are reused across logins, potentially letting an intruder impersonate a cardholder
- D.An attack where a crafted request forces the server to fetch internal URLs, potentially exposing metadata services
Why A is correct
SQL injection allows attackers to manipulate database queries through malicious input, potentially exposing stored cardholder data.
Know someone studying for PCI DSS? Send them this one.