Exam SY0-601 All QuestionsBrowse all questions from this exam
Go to Exam
Question 5

A security analyst is reviewing application logs to determine the source of a breach and locates the following log: https://www.comptia.com/login.php?id='%20or%20'1'1='1

Which of the following has been observed?

    Correct Answer: C

    The provided log entry indicates a SQL injection (SQLi) attack. SQL injection occurs when an attacker inserts or

Discussion
Joe1984Option: C

1=1 is true. SQL injection

Proctored_ExpertOption: C

SQLi (SQL injection) has been observed. SQL injection is a type of cyber attack that involves injecting malicious code into a database through a vulnerable web application. The malicious code is typically designed to manipulate or extract data from the database, allowing the attacker to gain unauthorized access to sensitive information. The log provided in the question appears to be a URL for a login page, with a string of text appended to the end. This string includes the text "or '1'1='1", which is a common syntax used in SQL injection attacks. This indicates that an SQL injection attack may have been attempted or successfully carried out against the website.

darkhatOption: C

SQL Injection is a type of cybersecurity attack where an attacker injects malicious SQL code into a web application's input fields to manipulate the application's database. In this case, the URL parameter "id" is being manipulated with the input "' or '1'1='1".

AwesomenessOption: C

The '1='1 is a clear indication of SQLi which is the short form of SQL Injection

AriesAE

So how to quickly identify this?

Protract8593Option: C

The observed log indicates a potential SQL injection (SQLi) attack. SQL injection is a type of cyberattack where an attacker manipulates the input of a web application to execute malicious SQL queries. In the given log, the URL parameter "id" seems to be vulnerable to SQL injection as it includes the payload "' or '1'1='1". This payload is a classic technique used in SQL injection to make the application's query always evaluate to true, which can lead to unauthorized access or data leakage. Let's break down the payload: The single quote ' after "id=" might be used to terminate the intended query. The "or" keyword is then used to introduce a new condition. "1'1='1" is a condition that always evaluates to true. In SQL, '1'='1' is always true. By appending this payload to the URL parameter "id," the attacker might be attempting to trick the application's database into returning data that it shouldn't, potentially bypassing authentication mechanisms or accessing sensitive information. Therefore, the correct answer is C. SQLi.

ApplebeesWaiter1122Option: C

Correct answer is C

DALLASCOWBOYSOption: C

C. '1'1=1 indicator i=of an SQL injection

LayinCableOption: C

1=1 ALWAYS equals an SQL injection.

russianOption: C

1=1 is always SQLi

DirtyDannOption: C

C. SQL injection all day.

FK_AYOption: C

C: SQLi

ebukibaOption: C

c is correct

reverse01Option: C

A big C. SQLi stands for SQL Injection. It is a type of web security vulnerability that occurs when an attacker is able to inject malicious SQL code into a web application's database query. This can happen when the application does not properly validate or sanitize user-supplied input before using it in SQL queries.

ApplebeesWaiter1122Option: C

The provided log entry indicates a potential SQL injection (SQLi) attack. In SQLi attacks, an attacker injects malicious SQL code into an application's database query to manipulate or bypass the intended query logic. In this case, the presence of the "or '1'1='1" payload suggests an attempt to bypass authentication or authorization checks by injecting a condition that always evaluates to true. This type of attack can allow unauthorized access to sensitive data or perform unauthorized actions within the application's database.

HiattechOption: C

SQL Injection Attack

xxxdolorxxxOption: C

I vote for C