Pergunta de entrevista da empresa SigFig

How would you go about testing SQL injection attacks?