Implementing and Operating Cisco Security Core Technologies v1.1 (350-701 SCOR v1.1) Exam Materials - Question #328 Discussion

What is a difference between out-of-band SQL injection attacks and blind SQL injection attacks? (Choose one answer)

• A. Out-of-band SQL injection attacks use the same channel to inject the SQL code and retrieve data, and blind SQL injection attacks use a different channel.
• B. Out-of-band SQL injection attacks use a different channel to inject the SQL code and retrieve data, and blind SQL injection attacks only inject the code.
• C. Out-of-band SQL injection attacks use an application to dump retrieved data, and blind SQL injection attacks observe an application's behavior to reconstruct the database structure.
• D. Out-of-band SQL injection attacks rely on error messages from a database server to obtain information, and blind SQL injection attacks rely on the database pausing before sending the results.

Brave-Dump Community Votes