200-201 Network Intrusion Analysis Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  SQL injection

  Why this is correct

  The payload contains a UNION SELECT statement appended to a query, the classic signature of SQL injection, where an attacker concatenates a crafted query to extract data such as usernames and passwords. The HTTP POST parameter carrying this syntax confirms database query manipulation rather than cross-site scripting or command injection.

• ✗

  Cross-site scripting

  Why it's wrong here

  Cross-site scripting injects script into content rendered to other users' browsers; the payload contains no HTML or JavaScript, only SQL targeting a database. It is tempting because XSS also arrives via unsanitised HTTP parameters, and it would be correct for a parameter echoing script tags back to victims.

• ✗

  Path traversal

  Why it's wrong here

  Path traversal manipulates file paths, typically using ../ sequences, to reach files outside a web root; the payload here is SQL syntax, not a filesystem path. It is tempting because both are injection flaws in HTTP parameters, and path traversal would be correct for a request containing directory-traversal sequences.

• ✗

  Command injection

  Why it's wrong here

  Command injection appends shell metacharacters to execute operating-system commands; UNION SELECT manipulates a SQL query instead. It is tempting because both exploit unsanitised input reaching an interpreter, and command injection would be correct for a payload such as ; cat /etc/passwd.