A WHERE clause in SQL specifies that a SQL Data Manipulation Language (DML) statement should only affect rows that meet specified criteria. The criteria are expressed in the form of predicates. WHERE clauses are not mandatory clauses of SQL DML statements, but can be used to limit the number of rows affected by a SQL DML statement or returned by a query.

A pen tester is trying to gain access to a database by inserting exploited query statements with a WHERE clause. The pen tester wants to retrieve all the entries from the database using the WHERE clause from a particular table (e.g. StudentTable).
What query does he need to write to retrieve the information?

• A. RETRIVE * FROM StudentTable WHERE roll_number = 1'#
• B. EXTRACT* FROM StudentTable WHERE roll_number = 1 order by 1000
• C. DUMP * FROM StudentTable WHERE roll_number = 1 AND 1=1-
• D. SELECT * FROM StudentTable WHERE roll_number = '' or '1' = '1'

Which one of the following architectures has the drawback of internally considering the hosted services individually?

• A. "Three-Homed Firewall" DMZ Architecture
• B. "Inside Versus Outside" Architecture
• C. Strong Screened-Subnet Architecture
• D. Weak Screened Subnet Architecture

What is the difference between penetration testing and vulnerability testing?

• A. Penetration testing goes one step further than vulnerability testing; while vulnerability tests check for known vulnerabilities, penetration testing adopts the concept of 'in-depth ethical hacking'
• B. Vulnerability testing is more expensive than penetration testing
• C. Penetration testing is conducted purely for meeting compliance standards while vulnerability testing is focused on online scans
• D. Penetration testing is based on purely online vulnerability analysis while vulnerability testing engages ethical hackers to find vulnerabilities

SQL injection attack consists of insertion or "injection" of either a partial or complete SQL query via the data input or transmitted from the client (browser) to the web application. A successful SQL injection attack can:
i) Read sensitive data from the database
iii) Modify database data (insert/update/delete)
iii) Execute administration operations on the database (such as shutdown the DBMS) iV) Recover the content of a given file existing on the DBMS file system or write files into the file system v) Issue commands to the operating system

Pen tester needs to perform various tests to detect SQL injection vulnerability. He has to make a list of all input fields whose values could be used in crafting a SQL query, including the hidden fields of POST requests and then test them separately, trying to interfere with the query and to generate an error.
In which of the following tests is the source code of the application tested in a non-runtime environment to detect the SQL injection vulnerabilities?

• A. Static Testing
• B. Automated Testing
• C. Dynamic Testing
• D. Function Testing