Future Business Leaders of America (FBLA) Cybersecurity Practice Test

What type of attack involves injecting corrupted data into a database?

1. SQL Injection

2. CSRF Attack

3. DNS Spoofing

4. XSS Attack

The correct answer is: SQL Injection

SQL Injection is the correct answer because it involves exploiting vulnerabilities in an application's software by injecting malicious SQL statements into a database query. This type of attack allows an attacker to manipulate or retrieve data from the database, potentially compromising the security and integrity of the data stored within. In an SQL Injection attack, the attacker is able to insert or modify queries that the database executes, which can lead to unauthorized access to sensitive information, data corruption, or even the complete takeover of the database server. The attack typically occurs when an application fails to properly sanitize user inputs, allowing raw SQL code to be executed by the database. Other types of attacks do not involve directly manipulating a database in this way. For instance, CSRF (Cross-Site Request Forgery) tricks a user’s browser into making unwanted requests, DNS Spoofing alters the DNS resolution process to misdirect users, and XSS (Cross-Site Scripting) allows attackers to inject scripts into web pages that are viewed by other users. Each of these targets different aspects of cybersecurity, but SQL Injection specifically pertains to database interactions, making it the most accurate choice in this context.