CertNexus Exam CFR-410 Topic 6 Question 17 Discussion

Actual exam question for CertNexus's CFR-410 exam

Question #: 17
Topic #: 6

[All CFR-410 Questions]

A company website was hacked via the following SQL query:

email, passwd, login_id, full_name FROM members

WHERE email = ''attacker@somewhere.com''; DROP TABLE members; --''

Which of the following did the hackers perform?

ACleared tracks of attacker@somewhere.com entries

BDeleted the entire members table

CDeleted the email password and login details

DPerformed a cross-site scripting (XSS) attack

Show Suggested Answer

Suggested Answer: A, B

by Shawnda at May 26, 2023, 07:43 PM

Limited Time Offer

25%

Off

Get Premium CFR-410 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tracey

1 months ago

I'm not sure if I'd call that 'clearing tracks' - more like completely annihilating the evidence! Good thing they weren't going for subtlety.

upvoted 0 times

Josephine

16 days ago

C) Deleted the email password and login details

upvoted 0 times

...

Tasia

23 days ago

B) Deleted the entire members table

upvoted 0 times

...

Annalee

1 months ago

A) Cleared tracks of attacker@somewhere.com entries

upvoted 0 times

...

Kimbery

2 months ago

Haha, the hackers really went all out, didn't they? Dropping the entire table - that's some serious database destruction!

upvoted 0 times

Jillian

23 days ago

C) Deleted the email password and login details

upvoted 0 times

...

Audria

1 months ago

B) Deleted the entire members table

upvoted 0 times

...

Joye

1 months ago

A) Cleared tracks of attacker@somewhere.com entries

upvoted 0 times

...

Mollie

2 months ago

I think the answer is B. Deleting the entire members table is the most logical conclusion based on the information provided.

upvoted 0 times

...

Lucia

2 months ago

The hackers definitely performed a SQL injection attack by including the DROP TABLE statement in the SQL query. That's a clear case of database manipulation.

upvoted 0 times

Tien

57 minutes ago

C) Deleted the email password and login details

upvoted 0 times

...

Dyan

1 days ago

B) Deleted the entire members table

upvoted 0 times

...

Laurel

15 days ago

A) Cleared tracks of attacker@somewhere.com entries

upvoted 0 times

...

Gabriele

25 days ago

D: The company needs to improve their website security.

upvoted 0 times

...

Sommer

1 months ago

C: They definitely knew what they were doing.

upvoted 0 times

...

Ardella

1 months ago

B: That's a serious breach of security.

upvoted 0 times

...

Junita

1 months ago

A: They deleted the entire members table.

upvoted 0 times

...

Estrella

2 months ago

I believe they also cleared tracks of attacker@somewhere.com entries to cover their tracks.

upvoted 0 times

...

Sheridan

2 months ago

I agree with Yong, they definitely performed a SQL injection attack to delete the table.

upvoted 0 times

...

Yong

2 months ago

I think the hackers deleted the entire members table.

upvoted 0 times

...

Mitsue

2 months ago

I believe they also cleared tracks of attacker@somewhere.com entries to cover their tracks.

upvoted 0 times

...

Loren

3 months ago

I agree with Ozell, they definitely performed a SQL injection to delete the table.

upvoted 0 times

...

Ozell

3 months ago

I think the hackers deleted the entire members table.

upvoted 0 times

...