CyberRevision
Continue revision → ← Subjects
CEH v13 · 20 official modules

All 5,000 CEH questions.

Search original practice content, filter by EC-Council module or exam domain, and open any question in revision mode.

0 answered overall

Showing 3,851–3,900 of 5,000 matching questions

50 per page
3851
Module 15 · Foundation Domain 3 · Security parameterized database query Unanswered

During an authorized retail-company assessment (RET-LAB-M15-3851), which risk is most directly associated with "parameterized database query"?

View answer choices
  1. Controls chosen without risk context may protect low-value assets while critical risks remain.
  2. String concatenation can let input alter database query syntax.
  3. Reliance on a single control creates a direct path when that control fails or is bypassed.
  4. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
Practice →
3852
Module 15 · Foundation Domain 3 · Security parameterized database query Unanswered

During a hospital incident-response exercise (HLT-SOC-M15-3852), which risk is most directly associated with "parameterized database query"?

View answer choices
  1. String concatenation can let input alter database query syntax.
  2. Reliance on a single control creates a direct path when that control fails or is bypassed.
  3. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
  4. Controls chosen without risk context may protect low-value assets while critical risks remain.
Practice →
3853
Module 15 · Foundation Domain 3 · Security parameterized database query Unanswered

During a university cyber-range engagement (EDU-RANGE-M15-3853), which risk is most directly associated with "parameterized database query"?

View answer choices
  1. Reliance on a single control creates a direct path when that control fails or is bypassed.
  2. Controls chosen without risk context may protect low-value assets while critical risks remain.
  3. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
  4. String concatenation can let input alter database query syntax.
Practice →
3854
Module 15 · Applied Domain 3 · Security parameterized database query Unanswered

During a financial-services purple-team test (FIN-PT-M15-3854), which risk is most directly associated with "parameterized database query"?

View answer choices
  1. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
  2. Controls chosen without risk context may protect low-value assets while critical risks remain.
  3. String concatenation can let input alter database query syntax.
  4. Reliance on a single control creates a direct path when that control fails or is bypassed.
Practice →
3855
Module 15 · Applied Domain 3 · Security parameterized database query Unanswered

During a cloud startup security audit (CLD-AUDIT-M15-3855), which risk is most directly associated with "parameterized database query"?

View answer choices
  1. Controls chosen without risk context may protect low-value assets while critical risks remain.
  2. String concatenation can let input alter database query syntax.
  3. Reliance on a single control creates a direct path when that control fails or is bypassed.
  4. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
Practice →
3856
Module 15 · Applied Domain 3 · Security parameterized database query Unanswered

During a government risk-validation project (GOV-RISK-M15-3856), which risk is most directly associated with "parameterized database query"?

View answer choices
  1. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
  2. Reliance on a single control creates a direct path when that control fails or is bypassed.
  3. String concatenation can let input alter database query syntax.
  4. Controls chosen without risk context may protect low-value assets while critical risks remain.
Practice →
3857
Module 15 · Applied Domain 3 · Security parameterized database query Unanswered

During an e-commerce application review (ECOM-WEB-M15-3857), which risk is most directly associated with "parameterized database query"?

View answer choices
  1. Reliance on a single control creates a direct path when that control fails or is bypassed.
  2. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
  3. Controls chosen without risk context may protect low-value assets while critical risks remain.
  4. String concatenation can let input alter database query syntax.
Practice →
3858
Module 15 · Advanced Domain 3 · Security parameterized database query Unanswered

During a manufacturing and OT security review (MFG-OT-M15-3858), which risk is most directly associated with "parameterized database query"?

View answer choices
  1. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
  2. Controls chosen without risk context may protect low-value assets while critical risks remain.
  3. String concatenation can let input alter database query syntax.
  4. Reliance on a single control creates a direct path when that control fails or is bypassed.
Practice →
3859
Module 15 · Advanced Domain 3 · Security parameterized database query Unanswered

During a mobile-services penetration test (MOB-TEST-M15-3859), which risk is most directly associated with "parameterized database query"?

View answer choices
  1. Controls chosen without risk context may protect low-value assets while critical risks remain.
  2. String concatenation can let input alter database query syntax.
  3. Reliance on a single control creates a direct path when that control fails or is bypassed.
  4. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
Practice →
3860
Module 15 · Advanced Domain 3 · Security parameterized database query Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M15-3860), which risk is most directly associated with "parameterized database query"?

View answer choices
  1. String concatenation can let input alter database query syntax.
  2. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
  3. Reliance on a single control creates a direct path when that control fails or is bypassed.
  4. Controls chosen without risk context may protect low-value assets while critical risks remain.
Practice →
3861
Module 15 · Foundation Domain 3 · Security parameterized database query Unanswered

During an authorized retail-company assessment (RET-LAB-M15-3861), which action most directly controls the risk related to "parameterized database query"?

View answer choices
  1. Maintain tested playbooks, roles, communications, evidence handling, and exercises.
  2. Maintain a repeatable assessment process tied to asset value and risk ownership.
  3. Design overlapping controls across identity, endpoint, network, application, and data layers.
  4. Use prepared statements and least-privilege database accounts.
Practice →
3862
Module 15 · Foundation Domain 3 · Security parameterized database query Unanswered

During a hospital incident-response exercise (HLT-SOC-M15-3862), which action most directly controls the risk related to "parameterized database query"?

View answer choices
  1. Use prepared statements and least-privilege database accounts.
  2. Maintain tested playbooks, roles, communications, evidence handling, and exercises.
  3. Maintain a repeatable assessment process tied to asset value and risk ownership.
  4. Design overlapping controls across identity, endpoint, network, application, and data layers.
Practice →
3863
Module 15 · Foundation Domain 3 · Security parameterized database query Unanswered

During a university cyber-range engagement (EDU-RANGE-M15-3863), which action most directly controls the risk related to "parameterized database query"?

View answer choices
  1. Design overlapping controls across identity, endpoint, network, application, and data layers.
  2. Use prepared statements and least-privilege database accounts.
  3. Maintain a repeatable assessment process tied to asset value and risk ownership.
  4. Maintain tested playbooks, roles, communications, evidence handling, and exercises.
Practice →
3864
Module 15 · Applied Domain 3 · Security parameterized database query Unanswered

During a financial-services purple-team test (FIN-PT-M15-3864), which action most directly controls the risk related to "parameterized database query"?

View answer choices
  1. Use prepared statements and least-privilege database accounts.
  2. Maintain tested playbooks, roles, communications, evidence handling, and exercises.
  3. Design overlapping controls across identity, endpoint, network, application, and data layers.
  4. Maintain a repeatable assessment process tied to asset value and risk ownership.
Practice →
3865
Module 15 · Applied Domain 3 · Security parameterized database query Unanswered

During a cloud startup security audit (CLD-AUDIT-M15-3865), which action most directly controls the risk related to "parameterized database query"?

View answer choices
  1. Design overlapping controls across identity, endpoint, network, application, and data layers.
  2. Maintain a repeatable assessment process tied to asset value and risk ownership.
  3. Maintain tested playbooks, roles, communications, evidence handling, and exercises.
  4. Use prepared statements and least-privilege database accounts.
Practice →
3866
Module 15 · Applied Domain 3 · Security parameterized database query Unanswered

During a government risk-validation project (GOV-RISK-M15-3866), which action most directly controls the risk related to "parameterized database query"?

View answer choices
  1. Use prepared statements and least-privilege database accounts.
  2. Maintain a repeatable assessment process tied to asset value and risk ownership.
  3. Maintain tested playbooks, roles, communications, evidence handling, and exercises.
  4. Design overlapping controls across identity, endpoint, network, application, and data layers.
Practice →
3867
Module 15 · Applied Domain 3 · Security parameterized database query Unanswered

During an e-commerce application review (ECOM-WEB-M15-3867), which action most directly controls the risk related to "parameterized database query"?

View answer choices
  1. Maintain a repeatable assessment process tied to asset value and risk ownership.
  2. Use prepared statements and least-privilege database accounts.
  3. Design overlapping controls across identity, endpoint, network, application, and data layers.
  4. Maintain tested playbooks, roles, communications, evidence handling, and exercises.
Practice →
3868
Module 15 · Advanced Domain 3 · Security parameterized database query Unanswered

During a manufacturing and OT security review (MFG-OT-M15-3868), which action most directly controls the risk related to "parameterized database query"?

View answer choices
  1. Use prepared statements and least-privilege database accounts.
  2. Maintain tested playbooks, roles, communications, evidence handling, and exercises.
  3. Design overlapping controls across identity, endpoint, network, application, and data layers.
  4. Maintain a repeatable assessment process tied to asset value and risk ownership.
Practice →
3869
Module 15 · Advanced Domain 3 · Security parameterized database query Unanswered

During a mobile-services penetration test (MOB-TEST-M15-3869), which action most directly controls the risk related to "parameterized database query"?

View answer choices
  1. Maintain tested playbooks, roles, communications, evidence handling, and exercises.
  2. Maintain a repeatable assessment process tied to asset value and risk ownership.
  3. Design overlapping controls across identity, endpoint, network, application, and data layers.
  4. Use prepared statements and least-privilege database accounts.
Practice →
3870
Module 15 · Advanced Domain 3 · Security parameterized database query Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M15-3870), which action most directly controls the risk related to "parameterized database query"?

View answer choices
  1. Design overlapping controls across identity, endpoint, network, application, and data layers.
  2. Use prepared statements and least-privilege database accounts.
  3. Maintain a repeatable assessment process tied to asset value and risk ownership.
  4. Maintain tested playbooks, roles, communications, evidence handling, and exercises.
Practice →
3871
Module 15 · Foundation Domain 3 · Security parameterized database query Unanswered

During an authorized retail-company assessment (RET-LAB-M15-3871), which evidence best supports an assessment of "parameterized database query"?

View answer choices
  1. Application code or query traces showing bound parameters rather than concatenated SQL.
  2. A risk register with likelihood, impact, owner, treatment, and review date.
  3. A timeline linking alerts, decisions, evidence, containment, and recovery actions.
  4. An architecture map showing which independent controls interrupt each attack path.
Practice →
3872
Module 15 · Foundation Domain 3 · Security parameterized database query Unanswered

During a hospital incident-response exercise (HLT-SOC-M15-3872), which evidence best supports an assessment of "parameterized database query"?

View answer choices
  1. An architecture map showing which independent controls interrupt each attack path.
  2. A timeline linking alerts, decisions, evidence, containment, and recovery actions.
  3. A risk register with likelihood, impact, owner, treatment, and review date.
  4. Application code or query traces showing bound parameters rather than concatenated SQL.
Practice →
3873
Module 15 · Foundation Domain 3 · Security parameterized database query Unanswered

During a university cyber-range engagement (EDU-RANGE-M15-3873), which evidence best supports an assessment of "parameterized database query"?

View answer choices
  1. Application code or query traces showing bound parameters rather than concatenated SQL.
  2. A timeline linking alerts, decisions, evidence, containment, and recovery actions.
  3. An architecture map showing which independent controls interrupt each attack path.
  4. A risk register with likelihood, impact, owner, treatment, and review date.
Practice →
3874
Module 15 · Applied Domain 3 · Security parameterized database query Unanswered

During a financial-services purple-team test (FIN-PT-M15-3874), which evidence best supports an assessment of "parameterized database query"?

View answer choices
  1. An architecture map showing which independent controls interrupt each attack path.
  2. Application code or query traces showing bound parameters rather than concatenated SQL.
  3. A risk register with likelihood, impact, owner, treatment, and review date.
  4. A timeline linking alerts, decisions, evidence, containment, and recovery actions.
Practice →
3875
Module 15 · Applied Domain 3 · Security parameterized database query Unanswered

During a cloud startup security audit (CLD-AUDIT-M15-3875), which evidence best supports an assessment of "parameterized database query"?

View answer choices
  1. A timeline linking alerts, decisions, evidence, containment, and recovery actions.
  2. A risk register with likelihood, impact, owner, treatment, and review date.
  3. Application code or query traces showing bound parameters rather than concatenated SQL.
  4. An architecture map showing which independent controls interrupt each attack path.
Practice →
3876
Module 15 · Applied Domain 3 · Security parameterized database query Unanswered

During a government risk-validation project (GOV-RISK-M15-3876), which evidence best supports an assessment of "parameterized database query"?

View answer choices
  1. A timeline linking alerts, decisions, evidence, containment, and recovery actions.
  2. A risk register with likelihood, impact, owner, treatment, and review date.
  3. An architecture map showing which independent controls interrupt each attack path.
  4. Application code or query traces showing bound parameters rather than concatenated SQL.
Practice →
3877
Module 15 · Applied Domain 3 · Security parameterized database query Unanswered

During an e-commerce application review (ECOM-WEB-M15-3877), which evidence best supports an assessment of "parameterized database query"?

View answer choices
  1. Application code or query traces showing bound parameters rather than concatenated SQL.
  2. A timeline linking alerts, decisions, evidence, containment, and recovery actions.
  3. An architecture map showing which independent controls interrupt each attack path.
  4. A risk register with likelihood, impact, owner, treatment, and review date.
Practice →
3878
Module 15 · Advanced Domain 3 · Security parameterized database query Unanswered

During a manufacturing and OT security review (MFG-OT-M15-3878), which evidence best supports an assessment of "parameterized database query"?

View answer choices
  1. A risk register with likelihood, impact, owner, treatment, and review date.
  2. Application code or query traces showing bound parameters rather than concatenated SQL.
  3. An architecture map showing which independent controls interrupt each attack path.
  4. A timeline linking alerts, decisions, evidence, containment, and recovery actions.
Practice →
3879
Module 15 · Advanced Domain 3 · Security parameterized database query Unanswered

During a mobile-services penetration test (MOB-TEST-M15-3879), which evidence best supports an assessment of "parameterized database query"?

View answer choices
  1. Application code or query traces showing bound parameters rather than concatenated SQL.
  2. A risk register with likelihood, impact, owner, treatment, and review date.
  3. A timeline linking alerts, decisions, evidence, containment, and recovery actions.
  4. An architecture map showing which independent controls interrupt each attack path.
Practice →
3880
Module 15 · Advanced Domain 3 · Security parameterized database query Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M15-3880), which evidence best supports an assessment of "parameterized database query"?

View answer choices
  1. An architecture map showing which independent controls interrupt each attack path.
  2. A timeline linking alerts, decisions, evidence, containment, and recovery actions.
  3. A risk register with likelihood, impact, owner, treatment, and review date.
  4. Application code or query traces showing bound parameters rather than concatenated SQL.
Practice →
3881
Module 15 · Foundation Domain 4 · Tools / Systems / Programs sqlmap Unanswered

During an authorized retail-company assessment (RET-LAB-M15-3881), which statement most accurately defines "sqlmap"?

View answer choices
  1. An automation tool for authorized detection and validation of SQL injection.
  2. A link-analysis platform for visualizing relationships among people, domains, organizations, and infrastructure.
  3. A modular reconnaissance framework used to organize authorized OSINT collection.
  4. A search service that indexes Internet-connected devices and service banners.
Practice →
3882
Module 15 · Foundation Domain 4 · Tools / Systems / Programs sqlmap Unanswered

During a hospital incident-response exercise (HLT-SOC-M15-3882), which statement most accurately defines "sqlmap"?

View answer choices
  1. A link-analysis platform for visualizing relationships among people, domains, organizations, and infrastructure.
  2. An automation tool for authorized detection and validation of SQL injection.
  3. A search service that indexes Internet-connected devices and service banners.
  4. A modular reconnaissance framework used to organize authorized OSINT collection.
Practice →
3883
Module 15 · Foundation Domain 4 · Tools / Systems / Programs sqlmap Unanswered

During a university cyber-range engagement (EDU-RANGE-M15-3883), which statement most accurately defines "sqlmap"?

View answer choices
  1. A modular reconnaissance framework used to organize authorized OSINT collection.
  2. A search service that indexes Internet-connected devices and service banners.
  3. An automation tool for authorized detection and validation of SQL injection.
  4. A link-analysis platform for visualizing relationships among people, domains, organizations, and infrastructure.
Practice →
3884
Module 15 · Applied Domain 4 · Tools / Systems / Programs sqlmap Unanswered

During a financial-services purple-team test (FIN-PT-M15-3884), which statement most accurately defines "sqlmap"?

View answer choices
  1. A link-analysis platform for visualizing relationships among people, domains, organizations, and infrastructure.
  2. A search service that indexes Internet-connected devices and service banners.
  3. A modular reconnaissance framework used to organize authorized OSINT collection.
  4. An automation tool for authorized detection and validation of SQL injection.
Practice →
3885
Module 15 · Applied Domain 4 · Tools / Systems / Programs sqlmap Unanswered

During a cloud startup security audit (CLD-AUDIT-M15-3885), which statement most accurately defines "sqlmap"?

View answer choices
  1. An automation tool for authorized detection and validation of SQL injection.
  2. A link-analysis platform for visualizing relationships among people, domains, organizations, and infrastructure.
  3. A modular reconnaissance framework used to organize authorized OSINT collection.
  4. A search service that indexes Internet-connected devices and service banners.
Practice →
3886
Module 15 · Applied Domain 4 · Tools / Systems / Programs sqlmap Unanswered

During a government risk-validation project (GOV-RISK-M15-3886), which statement most accurately defines "sqlmap"?

View answer choices
  1. A link-analysis platform for visualizing relationships among people, domains, organizations, and infrastructure.
  2. An automation tool for authorized detection and validation of SQL injection.
  3. A search service that indexes Internet-connected devices and service banners.
  4. A modular reconnaissance framework used to organize authorized OSINT collection.
Practice →
3887
Module 15 · Applied Domain 4 · Tools / Systems / Programs sqlmap Unanswered

During an e-commerce application review (ECOM-WEB-M15-3887), which statement most accurately defines "sqlmap"?

View answer choices
  1. An automation tool for authorized detection and validation of SQL injection.
  2. A modular reconnaissance framework used to organize authorized OSINT collection.
  3. A search service that indexes Internet-connected devices and service banners.
  4. A link-analysis platform for visualizing relationships among people, domains, organizations, and infrastructure.
Practice →
3888
Module 15 · Advanced Domain 4 · Tools / Systems / Programs sqlmap Unanswered

During a manufacturing and OT security review (MFG-OT-M15-3888), which statement most accurately defines "sqlmap"?

View answer choices
  1. A link-analysis platform for visualizing relationships among people, domains, organizations, and infrastructure.
  2. A modular reconnaissance framework used to organize authorized OSINT collection.
  3. A search service that indexes Internet-connected devices and service banners.
  4. An automation tool for authorized detection and validation of SQL injection.
Practice →
3889
Module 15 · Advanced Domain 4 · Tools / Systems / Programs sqlmap Unanswered

During a mobile-services penetration test (MOB-TEST-M15-3889), which statement most accurately defines "sqlmap"?

View answer choices
  1. An automation tool for authorized detection and validation of SQL injection.
  2. A link-analysis platform for visualizing relationships among people, domains, organizations, and infrastructure.
  3. A modular reconnaissance framework used to organize authorized OSINT collection.
  4. A search service that indexes Internet-connected devices and service banners.
Practice →
3890
Module 15 · Advanced Domain 4 · Tools / Systems / Programs sqlmap Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M15-3890), which statement most accurately defines "sqlmap"?

View answer choices
  1. An automation tool for authorized detection and validation of SQL injection.
  2. A modular reconnaissance framework used to organize authorized OSINT collection.
  3. A search service that indexes Internet-connected devices and service banners.
  4. A link-analysis platform for visualizing relationships among people, domains, organizations, and infrastructure.
Practice →
3891
Module 15 · Foundation Domain 4 · Tools / Systems / Programs sqlmap Unanswered

During an authorized retail-company assessment (RET-LAB-M15-3891), which risk is most directly associated with "sqlmap"?

View answer choices
  1. Combining public data can expose relationships that were not obvious individually.
  2. High-impact options can alter or extract sensitive database content.
  3. Exposed management services and old banners make vulnerable assets easy to discover.
  4. Automated modules can query third parties or collect data outside scope.
Practice →
3892
Module 15 · Foundation Domain 4 · Tools / Systems / Programs sqlmap Unanswered

During a hospital incident-response exercise (HLT-SOC-M15-3892), which risk is most directly associated with "sqlmap"?

View answer choices
  1. High-impact options can alter or extract sensitive database content.
  2. Combining public data can expose relationships that were not obvious individually.
  3. Automated modules can query third parties or collect data outside scope.
  4. Exposed management services and old banners make vulnerable assets easy to discover.
Practice →
3893
Module 15 · Foundation Domain 4 · Tools / Systems / Programs sqlmap Unanswered

During a university cyber-range engagement (EDU-RANGE-M15-3893), which risk is most directly associated with "sqlmap"?

View answer choices
  1. Automated modules can query third parties or collect data outside scope.
  2. Exposed management services and old banners make vulnerable assets easy to discover.
  3. Combining public data can expose relationships that were not obvious individually.
  4. High-impact options can alter or extract sensitive database content.
Practice →
3894
Module 15 · Applied Domain 4 · Tools / Systems / Programs sqlmap Unanswered

During a financial-services purple-team test (FIN-PT-M15-3894), which risk is most directly associated with "sqlmap"?

View answer choices
  1. Automated modules can query third parties or collect data outside scope.
  2. Exposed management services and old banners make vulnerable assets easy to discover.
  3. High-impact options can alter or extract sensitive database content.
  4. Combining public data can expose relationships that were not obvious individually.
Practice →
3895
Module 15 · Applied Domain 4 · Tools / Systems / Programs sqlmap Unanswered

During a cloud startup security audit (CLD-AUDIT-M15-3895), which risk is most directly associated with "sqlmap"?

View answer choices
  1. Exposed management services and old banners make vulnerable assets easy to discover.
  2. High-impact options can alter or extract sensitive database content.
  3. Combining public data can expose relationships that were not obvious individually.
  4. Automated modules can query third parties or collect data outside scope.
Practice →
3896
Module 15 · Applied Domain 4 · Tools / Systems / Programs sqlmap Unanswered

During a government risk-validation project (GOV-RISK-M15-3896), which risk is most directly associated with "sqlmap"?

View answer choices
  1. High-impact options can alter or extract sensitive database content.
  2. Combining public data can expose relationships that were not obvious individually.
  3. Automated modules can query third parties or collect data outside scope.
  4. Exposed management services and old banners make vulnerable assets easy to discover.
Practice →
3897
Module 15 · Applied Domain 4 · Tools / Systems / Programs sqlmap Unanswered

During an e-commerce application review (ECOM-WEB-M15-3897), which risk is most directly associated with "sqlmap"?

View answer choices
  1. Combining public data can expose relationships that were not obvious individually.
  2. Exposed management services and old banners make vulnerable assets easy to discover.
  3. Automated modules can query third parties or collect data outside scope.
  4. High-impact options can alter or extract sensitive database content.
Practice →
3898
Module 15 · Advanced Domain 4 · Tools / Systems / Programs sqlmap Unanswered

During a manufacturing and OT security review (MFG-OT-M15-3898), which risk is most directly associated with "sqlmap"?

View answer choices
  1. High-impact options can alter or extract sensitive database content.
  2. Automated modules can query third parties or collect data outside scope.
  3. Exposed management services and old banners make vulnerable assets easy to discover.
  4. Combining public data can expose relationships that were not obvious individually.
Practice →
3899
Module 15 · Advanced Domain 4 · Tools / Systems / Programs sqlmap Unanswered

During a mobile-services penetration test (MOB-TEST-M15-3899), which risk is most directly associated with "sqlmap"?

View answer choices
  1. Exposed management services and old banners make vulnerable assets easy to discover.
  2. High-impact options can alter or extract sensitive database content.
  3. Combining public data can expose relationships that were not obvious individually.
  4. Automated modules can query third parties or collect data outside scope.
Practice →
3900
Module 15 · Advanced Domain 4 · Tools / Systems / Programs sqlmap Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M15-3900), which risk is most directly associated with "sqlmap"?

View answer choices
  1. High-impact options can alter or extract sensitive database content.
  2. Automated modules can query third parties or collect data outside scope.
  3. Combining public data can expose relationships that were not obvious individually.
  4. Exposed management services and old banners make vulnerable assets easy to discover.
Practice →