Question

A security administrator is testing their organization's database server, which services a publicly accessible web application server. The security administrator sends unexpected input combined with arbitrary commands to the web application to determine whether the database server is vulnerable.

What kind of vulnerability is the security administrator testing?

answer

Injection flaws


Software and data integrity failures


Broken access control


Cryptographic failures

Answer 1

Injection flaws

(They're testing for injection vulnerabilities such as SQL injection by sending unexpected input and arbitrary commands.)