Here are all the actual test exam dumps for IT exams. Most people prepare for the actual exams with our test dumps to pass their exams. So it's critical to choose and actual test pdf to succeed.

Exam 312-50v13 Topic 1 Question 936 Discussion

Actual exam question for ECCouncil's 312-50v13 exam
Question #: 936
Topic #: 1
A tester evaluates a login form that builds SQL queries using unsanitized input. By submitting a single quote (
' ), the tester bypasses authentication and logs in. What type of SQL injection occurred?

Suggested Answer: D Vote an answer

The CEH Web Application Attacks module explains tautology-based SQL injection as an attack where input alters a conditional statement to always evaluate as TRUE (e.g., ' OR ' 1 ' = ' 1 ' ).
Submitting a single quote often breaks query logic and allows attackers to manipulate authentication conditions.
Option D is correct.
Option A extracts data.
Option B relies on error messages.
Option C uses timing delays.
CEH identifies tautology attacks as one of the earliest and most common SQL injection techniques.

by Quennel at Aug 19, 2026, 01:47 AM

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.