how to have cisco certification

how to have cisco certification.8. What isSQL injection vulnerability?a. A type of vulnerability that could be exploited to insert or "inject" SQL query statements from the client to the application or database as input datab. A type of vulnerability that can be exploited to "inject" a new password into a SQL server or clientC. A DoS vulnerability that can crash a SQL serverd. An elevation-of-privilege vulnerability in SQL servers13.2 Types of Attacks 46913.2 Types of Attacks The reader should know that most attackers do not want to be noticed when they launch an attack. They use various means to hide what they are doing when they try to compromise the network. This section will describe the common types of attacks launched by threat makers.13.2.1 Reconnaissance Attacks A reconnaissanceattack (REA) is the process of discovering information about the network, information about the user, and information about the victim. The specific technique of this attack is to first scan the entire network in an attempt to discover the IP addresses of the hosts responding to the scan; further scanning is done for specific IP addresses in an attempt to discover which ports are open on devices with those IP addresses. In general, a reconnaissance attack is the first action taken to discover what resources are available within the network and to determine what vulnerabilities are available for exploitation. Scanning can be divided into passive and active. An attacker can perform a passive scan by simply researching the victim's public record information, social media site information, and other technical information (e.g., DNS, whois, etc.). The attacker can use tools such as Maltego to speed up the "research" process. Active scans are performed with the help of a tool called a "scanner". Some of the commercial/open source applications and vulnerability scanners are shown below.Portswigger's Burp Suite Professional