Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) · Cisco
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
SQL Injection - SQL injection usually occurs when you ask a user for input, like their username/userid, and instead of a name/id, the user gives you an SQL statement that you will unknowingly run on your database. Time-Based Blind SQL Injection: - If the website does not return an immediate response, it indicates a vulnerability to blind SQL injection. The most popular time-intensive operation is a sleep operation. - Based on the example above, the attacker would benchmark the web server response time for a regular SQL query, and then would issue the request below: - http://www.webshop.local/item.php?id=14 and if(1=1, sleep(15), false) - The website is vulnerable if the response is delayed by 15 seconds. https://brightsec.com/blog/blind-sql-injection/
SLEEP is a query that pauses the MySQL process for a given duration
i agree with answer D i think blind SQL injection is correct