What type of software exploit injects malicious SQL scripts into database input entry boxes, allowing attackers to download entire customer record directories illegally? MCQ with Answer and Explanation

What type of software exploit injects malicious SQL scripts into database input entry boxes, allowing attackers to download entire customer record directories illegally?
A. Denial of Service Loop
B. SQL Injection
C. Cross-Site Scripting
D. Buffer Overflow Exploit
Answer: Option B
Solution (By JKSSB Mock Tests)
SQL injection executes arbitrary database commands by inserting malicious SQL code statements into unvalidated input fields.

Discuss this Question (0)

No comments yet. Be the first to start the discussion!

Practice More Cyber Security Questions

Question #1
Which of the following is a method to protect against social engineering attacks?
A. Encrypting data
B. Using antivirus software
C. Security awareness training
D. Installing a firewall

Correct Answer: Option C


Explanation:
Security awareness training educates employees about social engineering tactics, helping them recognize and avoid manipulation attempts.

This question belongs to: Computer Cyber Security
Question #2
What is 'pharming'?
A. A type of antivirus
B. A type of phishing that redirects users to fake websites without their knowledge
C. A type of firewall
D. A type of farming

Correct Answer: Option B


Explanation:
Pharming is a cyber attack that redirects a website's traffic to a fake site without the user's knowledge, often by exploiting DNS vulnerabilities, to steal information.

This question belongs to: Computer Cyber Security
Question #3
Which of the following is a characteristic of a Trojan Horse?
A. It is always harmless
B. It encrypts files for ransom
C. It disguises itself as a legitimate program
D. It replicates itself without user intervention

Correct Answer: Option C


Explanation:
A Trojan Horse is a type of malware that appears to be a legitimate program but contains malicious code, tricking users into installing it.

This question belongs to: Computer Cyber Security