Which statement describes an example of an out-of-band SQL injection attack?
- An attacker launches the attack on a web site and forces the web application to delay the query results.
- An attacker launches the attack on a web site and views the query results immediately on the screen.
- An attacker launches the attack on a web site and reconstructs the information by sending specific SQL statements.
- An attacker launches the attack on a web site and forces the web application to send the query results via an email.
Explanation: In an out-of-band SQL injection, the attacker retrieves data using a different channel. For example, an email, a text, or an instant message could be sent to the attacker with the query results.
Related exam: 6.13.3 Quiz - Performing Post-Exploitation Techniques Answers
