Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 3

Which flaw does an attacker leverage when exploiting SQL injection vulnerabilities?

Answer options

• A. user input validation in a web page or web application
• B. Linux and Windows operating systems
• C. database
• D. web page images

Correct answer: A

Explanation

The correct answer is A because SQL injection exploits the lack of proper validation of user input in web applications, allowing attackers to manipulate SQL queries. Options B, C, and D do not directly relate to the mechanism of SQL injection vulnerabilities, as they pertain to operating systems, databases in general, and images respectively.