ExamTopics Logo
Mail Us[email protected]
Menu
Comptia Discussions
exam questions

Exam PT0-002 All Questions

View all questions & answers for the PT0-002 exam
Go to Exam

Exam PT0-002 topic 1 question 343 discussion

Actual exam question from CompTIA's PT0-002
Question #: 343
Topic #: 1
[All PT0-002 Questions]

While a penetration tester conducts a web application assessment, the following URL is accessed:

http://comptia.com/index.php?id=1%20ORR%2022-7%3d10

Which of the following exploit types is being attempted?

  • A. XML injection
  • B. SQL injection
  • C. Session hijacking
  • D. Buffer overflow
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by fe2cda8 at Nov. 16, 2024, 4:10 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Vslaugh
3 months, 1 week ago
Selected Answer: B
The payload contains an SQL injection attempt, it uses logical operators (OR) and expressions (22-7=10) to manipulate a SQL query.
upvoted 1 times
kinny4000
2 months, 2 weeks ago
This will evaluate to 'false' and only show the data for id=1. The pentester should've written 22-12=10 or something similar to achieve some proof of SQL injection possibility.
upvoted 1 times
...
...
fe2cda8
5 months, 1 week ago
B. because of the equal sign "="inside the URL
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago