Task 4:

Criteria:

You need two VMs.

VM1 no countermeasure: your attack works - in both SELECT and UPDATE scenarios.
VM2 has countermeasure: your attack doesn't work in either SELECT or UPDATE scenarios.