CS Security & Databases 2

Question 1

A web application concatenates user input directly into an SQL query string. Which attack is it most vulnerable to?

Accepted Answer

SQL injection

Answer

Concatenating unsanitized input into SQL queries allows attackers to inject malicious SQL code.

Question 2

Which database property ensures that a transaction is either fully completed or fully rolled back?

Accepted Answer

Atomicity

Answer

Atomicity guarantees all-or-nothing execution of a transaction.

Question 3

What is the primary purpose of salting passwords before hashing them?

Accepted Answer

To defeat precomputed rainbow table attacks

Answer

A unique salt per password makes precomputed hash tables useless against the stored hashes.

Question 4

In a relational database, a foreign key constraint primarily enforces which property?

Accepted Answer

Referential integrity

Answer

Foreign keys ensure that a referenced row exists in the parent table, maintaining referential integrity.

Question 5

Which security principle states that users should be granted only the permissions necessary to perform their job?

Accepted Answer

Least privilege

Answer

The principle of least privilege limits each user to the minimum access needed.

(CS) Computer Science Practice Test