If we are to use equivalent partitioning technique, which one of the following answers is the most efficient to test against SQL injection?
- %, ', @, abn123
- ', ab123
The answer is 3.
This answer is correct, but from equivalent partitioning point of view, it offers two valid inputs, bbbbb and 12345, from valid input partitioning.
%, ', @, abn123
This answer has three valid inputs from valid input partitioning.
This answer has one valid input and one escape character.
This answer has only got one escape character, no valid input at all.
Please bear in mind, ISTQB exam does not cover everything, letting alone SQL injection techniques. I suggest you spend some time studying SQL injection, there is a good link here. SQL Injection OWASP