Exam 312-50v12 topic 1 question 87 discussion

C. Variation Like 312-50v11 Q190 CEH BOOK V12 Module 15 P2336 Evasion Technique: Variation Variation is an evasion technique whereby the attacker can easily evade any comparison statement. The attacker does this by placing characters such as “' or '1'='1'” in any basic injection statement such as “or 1=1” or with other accepted SQL comments. The SQL interprets this as a comparison between two strings or characters instead of two numeric values.

C. Variation Variation: An attacker uses this technique to easily evade any comparison statement

Answer: C. Variation Explanation: In the given scenario, Daniel is attempting to evade the IDS that detects SQL injection attempts based on predefined signatures. To bypass the detection mechanism, he used the variation technique. The variation technique is a method of altering the injection code so that it cannot be detected by an IDS. In this technique, an attacker alters the injection code, for example, by changing the case of letters or by adding extra characters or spaces to the code, to bypass the signature-based detection. By using the variation technique, the attacker can bypass the signature-based detection mechanisms, and the malicious code is executed on the targeted system.