Ethical Hacking Essentials Practice Test

What type of attack did Mark perform by injecting SQL code into a database?

1. Passive Attack

2. Social Engineering Attack

3. Active Attack

4. Insider Attack

The correct answer is: Active Attack

The injection of SQL code into a database is classified as an active attack because it involves directly manipulating the database by sending malicious SQL queries. In this scenario, the attacker is actively trying to exploit a vulnerability in the application to access or modify data unlawfully. Active attacks aim to alter data or disrupt services, and in the case of SQL injection, the attacker can gain unauthorized access to sensitive information, modify records, delete data, or even execute administrative operations. This contrasts with passive attacks, where an attacker might merely intercept and monitor communications without altering the data. Social engineering attacks rely on manipulating individuals into divulging confidential information, while insider attacks are carried out by someone within the organization with access rights to systems and data.