Q7 (20 points) What is it called when a specific character string is used as an input in...
Accenture technical mcq question, verified with a worked answer. Free to practise - no sign-up.
(20 points)
What is it called when a specific character string is used as an input in the web application to illegally manipulate the server-side database.
Show answer & explanation
SQL injection is a code injection technique where malicious SQL statements are inserted into user input fields to manipulate backend databases. Option A (DoS) targets service availability, not database manipulation. Option B and C are not standardized security terminology—the correct technical term is SQL injection, a well-documented attack vector in web security.
Step-by-step Derivation:
The question describes inputting a malicious character string into a web application to illegally manipulate a server-side database. This is the textbook definition of SQL injection attacks, where an attacker injects SQL code through input fields (e.g., login forms) to bypass authentication, extract data, or modify database records. SQL injection remains one of the OWASP Top 10 vulnerabilities.