Certified Ethical Hacker – CEH – 312-50 – Question130

A tester has been hired to do a web application security test. The tester notices that the site is dynamic and must make use of a back end database.
In order for the tester to see if SQL injection is possible, what is the first character that the tester should use to attempt breaking a valid SQL request?


A.
Semicolon
B. Single quote
C. Exclamation mark
D. Double quote

Correct Answer: B