High numbers of failed login attempts that comment out part of the query may indicate which types of attacks?

• A. SQL injection and phishing attacks
• B. Distributed denial of service (DDoS) and SQL injection
• C. Ransomware and DDoS
• D. Brute force and phishing attacks

Answer: (B)

The presence of high numbers of failed login attempts that comment out part of the query is indicative of SQL injection attacks. SQL injection occurs when an attacker enters SQL code into input fields with the intention of tricking the application into executing unintended commands. Specifically, comment characters—like "--" in SQL—are often used in these types of attacks to manipulate the structure of an SQL query, potentially bypassing authentication mechanisms and allowing unauthorized access to the database.

The inclusion of Distributed Denial of Service (DDoS) in this option might seem counterintuitive, since DDoS attacks typically focus on overwhelming a service with traffic rather than exploiting vulnerabilities in queries. However, the crux of the question revolves around SQL injection, making this combination relevant as it highlights the potential severity of different types of attacks within a single scope of concern about system security.

This reinforces the importance of securing web applications against both SQL injections and the implications of other attack vectors like DDoS, which can occur concurrently with various targeted attacks. Thus, the successful identification of failed login attempts, particularly as they relate to altering SQL syntax, distinctly aligns with SQL injection methodologies.