Câu 169: GCIH: GIAC Certified Incident Handler

Suppose a web application builds the SQL command "select PhoneNumber from contacts where Company = '[value]';". What would the result likely be if an attacker submitted the value "GIAC'; drop table contacts; --" to the database?

1. A. Nothing. The 'contacts;--' portion is syntactically incorrect.
2. B. The database would attempt to drop the PhoneNumber from the 'GIAC' table. — đáp án hiện tại
3. C. The 'contacts' table would be deleted from the database.
4. D. The database would drop all records containing 'GIAC' from the 'contacts' table.