easyMultiple ChoiceObjective-mapped
FC0-U71 Practice Question: A web application constructs SQL queries by…
A web application constructs SQL queries by concatenating user input directly. What is the primary security risk?
⚠ Common exam trap
Candidates often confuse SQL injection with cross-site scripting (XSS) because both involve user input, but XSS targets the browser with scripts, while SQL injection targets the database server directly.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
SQL injection
When a web application constructs SQL queries by concatenating user input directly, an attacker can inject malicious SQL code into the query. This allows the attacker to manipulate the database, such as by bypassing authentication, retrieving unauthorized data, or executing arbitrary commands. This is the classic definition of SQL injection, which exploits the lack of input sanitization or parameterized queries.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
SQL injection
Why this is correct
Input concatenation allows malicious SQL execution.
- ✗
Denial of service
Why it's wrong here
DoS is possible but not the primary risk.
- ✗
Cross-site scripting
Why it's wrong here
XSS involves injecting scripts into web pages.
- ✗
Buffer overflow
Why it's wrong here
Not directly related to SQL.
Go deeper
Related to this question
About these practice questions
Courseiva writes every FC0-U71 question from scratch — 988 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This FC0-U71 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FC0-U71 exam.