🛡️ Free practice test question from: Attack Vector (Security+)

SQL Injection Attack: This attack specifically targets SQL databases by injecting malicious SQL code into input fields (like forms, search boxes, etc.). If the application doesn't properly sanitize user input, this injected code can be executed directly by the database, potentially allowing attackers to access, modify, or delete data.

Form Injection Attack: This is a more general term and doesn't specifically refer to attacks targeting SQL databases. It could refer to various attacks exploiting vulnerabilities in web forms.

Query String Attack: While query strings (the part of a URL after the ?) can be a vector for attacks, the term "Query String Attack" is not a standard security term. SQL injection often uses query strings, but it's the SQL injection itself that's the attack.

Input Parameter Attack: This is a very broad term and doesn't specifically refer to any one type of attack. Many different attacks involve manipulating input parameters.