Which of the following BEST explains this type of attack?

A security analyst was deploying a new website and found a connection attempting to authenticate on the site’s portal. While Investigating.

The incident, the analyst identified the following Input in the username field:

Which of the following BEST explains this type of attack?
A . DLL injection to hijack administrator services
B. SQLi on the field to bypass authentication
C. Execution of a stored XSS on the website
D. Code to execute a race condition on the server

View Answer

Answer: B

Explanation:

The input "admin’ or 1=1–" in the username field is an example of SQL injection (SQLi) attack. In this case, the attacker is attempting to bypass authentication by injecting SQL code into the username field that will cause the authentication check to always return true. References: CompTIA Security+ SY0-601 Exam Objectives: 3.1 Given a scenario, use appropriate software tools to assess the security posture of an organization.