Which statement describes an example of an out-of-band SQL injection attack?

Which statement describes an example of an out-of-band SQL injection attack?

• An attacker launches the attack on a web site and forces the web application to delay the query results.
• An attacker launches the attack on a web site and views the query results immediately on the screen.
• An attacker launches the attack on a web site and reconstructs the information by sending specific SQL statements.
• An attacker launches the attack on a web site and forces the web application to send the query results via an email.

Explanation: In an out-of-band SQL injection, the attacker retrieves data using a different channel. For example, an email, a text, or an instant message could be sent to the attacker with the query results.

Exam with this question: 6.13.3 Quiz - Performing Post-Exploitation Techniques Answers