adplus-dvertising

Welcome to the Development with SQL Server MCQs Page

Dive deep into the fascinating world of Development with SQL Server with our comprehensive set of Multiple-Choice Questions (MCQs). This page is dedicated to exploring the fundamental concepts and intricacies of Development with SQL Server, a crucial aspect of SQL Server. In this section, you will encounter a diverse range of MCQs that cover various aspects of Development with SQL Server, from the basic principles to advanced topics. Each question is thoughtfully crafted to challenge your knowledge and deepen your understanding of this critical subcategory within SQL Server.

frame-decoration

Check out the MCQs below to embark on an enriching journey through Development with SQL Server. Test your knowledge, expand your horizons, and solidify your grasp on this vital area of SQL Server.

Note: Each MCQ comes with multiple answer choices. Select the most appropriate option and test your understanding of Development with SQL Server. You can click on an option to test your knowledge before viewing the solution for a MCQ. Happy learning!

Development with SQL Server MCQs | Page 14 of 14

Explore more Topics under SQL Server

Q131.
SQL injection is an attack in which _________ code is inserted into strings that are later passed to an instance of SQL Server.

a.

malicious

b.

redundant

c.

clean

d.

non malicious

Discuss
Answer: (a).malicious
Q132.
Point out the correct statement.

a.

Parameterized data cannot be manipulated by a skilled and determined attacker

b.

Procedure that constructs SQL statements should be reviewed for injection vulnerabilities

c.

The primary form of SQL injection consists of indirect insertion of code

d.

None of the mentioned

Discuss
Answer: (b).Procedure that constructs SQL statements should be reviewed for injection vulnerabilities
Q133.
Which of the following script is example of SQL injection attack?

a.

var Shipcity;
ShipCity = Request.form ("ShipCity");
var SQL = "select * from OrdersTable where ShipCity = '" + ShipCity + "'";

b.

var Shipcity;
ShipCity = Request.form ("ShipCity");

c.

var Shipcity;
var SQL = "select * from OrdersTable where ShipCity = '" + ShipCity + "'";

d.

All of the mentioned

Discuss
Answer: (a).var Shipcity;
ShipCity = Request.form ("ShipCity");
var SQL = "select * from OrdersTable where ShipCity = '" + ShipCity + "'";
Q134.
Any user-controlled parameter that gets processed by the application includes vulnerabilities like ___________

a.

Host-related information

b.

Browser-related information

c.

Application parameters included as part of the body of a POST request

d.

All of the mentioned

Discuss
Answer: (d).All of the mentioned
Q135.
Point out the wrong statement.

a.

SQL injection vulnerabilities occur whenever input is used in the construction of an SQL query without being adequately constrained or sanitized

b.

SQL injection allows an attacker to access the SQL servers and execute SQL code under the privileges of the user used to connect to the database

c.

The use of PL-SQL opens the door to these vulnerabilities

d.

None of the mentioned

Discuss
Answer: (c).The use of PL-SQL opens the door to these vulnerabilities
Q136.
Which of the stored procedure is used to test the SQL injection attack?

a.

xp_write

b.

xp_regwrite

c.

xp_reg

d.

all of the mentioned

Discuss
Answer: (b).xp_regwrite
Q137.
If xp_cmdshell has been disabled with sp_dropextendedproc, we can simply inject the following code?

a.

sp_addextendedproc ‘xp_cmdshell’,’xp_log70.dll’

b.

sp_addproc ‘xp_cmdshell’,’xp_log70.dll’

c.

sp_addextendedproc ‘xp_cmdshell’,’log70.dll’

d.

none of the mentioned

Discuss
Answer: (a).sp_addextendedproc ‘xp_cmdshell’,’xp_log70.dll’
Q138.
Which of the following code can enable xp_cmdshell?

a.

master..sp_configure 'show advanced options',1
reconfigure
master..sp_configure 'xp_cmdshell',1
reconfigure

b.

master..sp_configure 'show advanced options',1
configure
master..sp_configure 'xp_cmdshell',1
configure

c.

master..sp_reconfigure 'show advanced options',1
reconfigure
master..sp_reconfigure 'xp_cmdshell',1
reconfigure

d.

All of the mentioned

Discuss
Answer: (a).master..sp_configure 'show advanced options',1
reconfigure
master..sp_configure 'xp_cmdshell',1
reconfigure
Q139.
Which of the following script is an example of Quick detection in the SQL injection attack?

a.

SELECT loginame FROM master..sysprocesses WHERE spid = @@SPID

b.

For integer inputs : convert(int,@@version)

c.

IF condition true-part ELSE false-part (S)

d.

SELECT header, txt FROM news UNION ALL SELECT name, pass FROM members

Discuss
Answer: (b).For integer inputs : convert(int,@@version)
Q140.
_______________ is time based SQL injection attack.

a.

Quick detection

b.

Initial Exploitation

c.

Blind SQL Injection

d.

Inline Comments

Discuss
Answer: (c).Blind SQL Injection
Page 14 of 14

Suggested Topics

Are you eager to expand your knowledge beyond SQL Server? We've curated a selection of related categories that you might find intriguing.

Click on the categories below to discover a wealth of MCQs and enrich your understanding of Computer Science. Happy exploring!

MongoDB

Learn the leading NoSQL database with our MongoDB MCQs. Understand everything from...

Object Oriented Programming

Enhance your coding skills with our Object Oriented Programming MCQs. Understand...

MATLAB

Hone your computational mathematics skills with our MATLAB MCQs. Understand...

IT Fundamentals

Navigate the basics of information technology with our IT Fundamentals MCQs. Get a...

Computer Architecture

Unveil the science behind computer design with our Computer Architecture MCQs. Topics...

Computer Hardware

Explore the tangible components of computers with our Computer Hardware MCQs. Learn...

Wireless and Mobile Communications

Get to grips with modern communication technologies with our Wireless and Mobile...

Data Warehousing and OLAP

Strengthen your knowledge of Data Warehousing and OLAP with our specialized MCQs....

Operating System

Dive deep into the core of computers with our Operating System MCQs. Learn about...