A large-scale inventory management platform implements a pattern-based inspection layer to prevent malicious database interactions.

The correct answer is Modifying spacing and delimiter placement to disrupt detection patterns. CEH web application hacking material explains that pattern-based inspection controls, including weak input filters and some signature-driven defenses, often rely on recognizable textual structure in malicious payloads. If detection depends on static pattern matching, an attacker may preserve the same logical database operation while changing whitespace, separators, delimiter placement, or token formatting so the payload no longer matches the expected signature. That is exactly what the question describes: blocked requests shared a consistent textual arrangement, and the tester changed the presentation of those components without changing the intended SQL effect. Alternate encoding and dynamic construction are also known evasion ideas, but the scenario specifically emphasizes changed arrangement rather than transformed character sets or runtime string building. Inline comments can fragment keywords, yet the broader and best-fitting CEH answer is modification of spacing and delimiters to break the detection pattern. CEH materials stress that filters focused only on signature appearance are fragile because slight formatting variation can bypass them while leaving the attack semantics intact. Therefore, option C is the most accurate evasion method.