ECCouncil Exam Questions

What is the first character that Bob should use to attempt breaking valid SQL request?

Bob has been hired to do a web application security test. Bob notices that the site is dynamic and must make use of a back end database. Bob wants to see if SQL Injection would be possible. What is the first character that Bob should use to attempt breaking valid SQL request?

A.
Semi Column

B.
Single Quote

C.
Exclamation Mark

D.
Double Quote

Explanation:
In SQL single quotes are used around values in queries, by entering another single quote Bob tests if the application will submit a null value and probably returning an error.