Which SQL Injection Type Uses True/False Responses?
This type of injection attack does not show any error message. It is difficult to exploit as it returns information when the application is given SQL payloads that elicit a true or false response from the server. By observing the response, an attacker can extract sensitive information. What type of attack is this?
Community Votes
100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The exam tests whether you can distinguish blind SQL injection from other SQLi families by the absence of error output and the use of boolean true/false inference; the trap is picking time-based simply because delay techniques are also blind.
Blind SQL injection is an inferential technique in which the attacker submits true/false SQL conditions and reads the application's behaviour instead of seeing query results or database errors. This page confirms option D and separates blind injection from union, error-based and time-based variants.
Many candidates choose time-based SQL injection because it also lacks visible output, but time-based relies on measured delays, whereas this scenario describes extracting data from true/false response differences.
Community Discussion (4 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Blind SQL injection matches the scenario exactly: the application returns no SQL error text and no query output, yet the attacker can submit boolean conditions and observe whether the page behaves as true or false. By chaining those inferred answers, the attacker reconstructs schema and data character by character. This is precisely the "no error message, infer from response" definition, so option D is the only fit. The unanimous learner votes for D are consistent with the CEHv12 objective on SQL injection types.Why the Other Options Are Wrong
Union SQL injection (A) depends on appending a UNION SELECT and seeing the combined result set in the response, which the question explicitly rules out. Error-based injection (B) is defined by forcing database error messages that reveal structure, again contradicted by "does not show any error message." Time-based injection (C) infers data by measuring deliberate delays, not by true/false content differences; although it is a blind subtype, the described true/false response mechanism points to the broader blind category in D.Community Comment Notes
As insaniunt noted, the attacker "doesn't directly see the results of the injected SQL query" and instead infers information from the application's response, which is the textbook blind model. shaody adds that "no data is transmitted through the web application" and the real result cannot be retrieved, reinforcing why union and error-based options fail. LordXander's terse "CEHv12 - 2225" reference and qwerty100's direct pick of D show the community consensus aligns with the exam blueprint, but the verdict rests on the wording of the scenario, not the vote count.Official Reference
Exam Strategy
When a SQLi question says no error message and no visible query output, classify it as blind before looking at timing details. Time-based injection is a blind subtype, so choose it only when the stem explicitly mentions delays or response time.
Frequently Asked Questions
Why is time-based SQL injection not the best answer here?
Time-based injection infers data from deliberate server delays, while the question describes true/false response differences with no timing element, so the broader blind label (D) fits.
How does blind SQL injection extract data with no output?
Attackers submit boolean conditions and compare responses to learn one bit at a time, eventually reconstructing database contents without seeing query results.