BSCP Practice Questions - Burp Suite Certified Practitioner (BSCP) Exam

Access More Questions

When testing for blind SQL injection, an attacker submits the payload `' AND SLEEP(5)--` and the application takes five additional seconds to respond. What does this confirm?

The application is vulnerable to error-based SQLi The application is vulnerable to time-based blind SQLi The application sanitizes inputs but is still injectable via UNION The application's WAF can be bypassed with sleep payloads

Correct Answer:

The application is vulnerable to time-based blind SQLi

Access more questions from this quiz

Continue to BSCP Practice Questions - Burp Suite Certified Practitioner (BSCP) Exam for more practice questions and the full quiz experience.

Access More Questions