Data Processing Data Security and Privacy 3

Question 1

What is a SQL injection attack?

Accepted Answer

Inserting malicious SQL code into input fields to manipulate database queries

Answer

Overloading a database server with an excessive number of SQL queries

Answer

Encrypting SQL databases to block unauthorized access attempts

Answer

Injecting test data into a production database during development

Question 2

What is ransomware?

Accepted Answer

Malware that encrypts a victim's data and demands payment for the decryption key

Answer

Software that monitors and records keystrokes to steal credentials

Answer

A phishing campaign targeting corporate email accounts

Answer

Malicious code embedded in data files to corrupt database contents

Question 3

Why is maintaining data backups important from a security perspective?

Accepted Answer

Backups allow data to be restored after loss caused by ransomware, corruption, or hardware failure

Answer

Backups prevent unauthorized users from accessing sensitive stored files

Answer

Backups encrypt data automatically before it is transmitted over networks

Answer

Backups monitor network traffic and flag suspicious data access attempts

Question 4

What is phishing?

Accepted Answer

A social engineering attack that tricks users into revealing sensitive information via fraudulent communications

Answer

A network technique used to intercept data packets in transit

Answer

A method of bypassing firewall rules using specially crafted network packets

Answer

An attack that floods a server with traffic to cause a denial of service

Question 5

What is the primary function of SSL/TLS in data security?

Accepted Answer

Providing encrypted communication channels to protect data transmitted over networks

Answer

Hashing user passwords before they are stored in authentication databases

Answer

Adding digital watermarks to data files to track unauthorized copies

Answer

Automatically scanning transmitted files for malware before delivery

Question 6

What is access control in data security?

Accepted Answer

Mechanisms that restrict who can view or use resources in a computing environment

Answer

Tools that automatically log and audit every data access event

Answer

Software that regulates the speed of data transfer between systems

Answer

Policies that determine how long data must be retained before deletion

Question 7

What is a VPN primarily used for in the context of data security?

Accepted Answer

Creating an encrypted tunnel for secure data transmission over public networks

Answer

Blocking malicious websites and preventing phishing attacks on endpoints

Answer

Scanning incoming data for viruses before it enters a corporate network

Answer

Authenticating remote users through biometric verification methods