Free ADC Security Protocols & Access Control Questions and Answers — Questions and Answers

Question 1: What is the main purpose of access control in a database?

To restrict unauthorized data access. (Correct answer)
To organize files alphabetically.
To encrypt all tables.
To automatically back up data.

Correct answer: To restrict unauthorized data access.

The main purpose of access control in a database is to manage and restrict who can view, modify, or delete data. It ensures that only authorized users or applications can perform specific operations, thereby protecting sensitive information and maintaining data security and integrity. This is a critical component of any robust database security strategy.

Question 2: What does authentication verify?

System settings.
IP location.
User identity. (Correct answer)
Browser history.

Correct answer: User identity.

Authentication is the process of verifying the identity of a user, system, or application attempting to access a database. It typically involves checking credentials like usernames and passwords against stored information. Successful authentication confirms that the entity is who they claim to be, granting them access based on their authorized permissions and ensuring system security.

Question 3: Which of the following is an example of multi-factor authentication?

Username only.
Password only.
Security question.
Password and fingerprint. (Correct answer)

Correct answer: Password and fingerprint.

Multi-factor authentication (MFA) requires users to provide two or more distinct verification factors from different categories to gain access. A password represents 'something you know,' while a fingerprint represents 'something you are.' Combining these significantly enhances security by requiring multiple proofs of identity.

Question 4: What is the principle of least privilege?

Users get minimum access rights. (Correct answer)
All users are administrators.
Guests get more access.
Everyone has full access.

Correct answer: Users get minimum access rights.

The Principle of Least Privilege dictates that users, programs, or processes should be granted only the minimum necessary permissions to perform their specific tasks. This security best practice limits the potential damage from compromised accounts or systems, reducing the attack surface and preventing unauthorized actions.

Question 5: Which SQL command controls user access to database objects?

SELECT
GRANT (Correct answer)
INSERT
UPDATE

Correct answer: GRANT

The `GRANT` SQL command is part of Data Control Language (DCL) and is specifically used to give users or roles permissions to perform certain operations on database objects, such as tables, views, or stored procedures. It allows database administrators to manage who can access and manipulate data within the database.

Question 6: What does role-based access control (RBAC) rely on?

Time of access.
User email domain.
User roles. (Correct answer)
Table size.

Correct answer: User roles.

Role-Based Access Control (RBAC) is an access control model that regulates access to resources based on the individual's role within an organization. Instead of assigning permissions directly to users, permissions are assigned to specific roles, and users are then assigned to one or more roles, simplifying access management and ensuring consistent security policies.

Question 7: What is the function of database auditing?

Monitors and logs database activity. (Correct answer)
Deletes unused tables.
Increases backup speed.
Optimizes queries.

Correct answer: Monitors and logs database activity.

Database auditing involves monitoring and recording specific actions performed within a database, such as data access, modifications, or administrative operations. This function is crucial for security, compliance, and accountability, as it provides a historical record of who did what, when, and where, helping to detect and investigate suspicious activities.

Question 8: What risk does SQL injection pose?

Slows down the database.
Increases storage needs.
Deletes all indexes.
Allows unauthorized access or manipulation of data. (Correct answer)

Correct answer: Allows unauthorized access or manipulation of data.

SQL injection is a code injection technique used to attack data-driven applications, in which malicious SQL statements are inserted into an entry field for execution. This vulnerability allows attackers to bypass authentication, retrieve sensitive data, modify database content, or even gain full control over the database server, posing a severe security risk.

Question 9: How can you prevent SQL injection attacks?

Encrypt table names.
Use parameterized queries. (Correct answer)
Disable the internet.
Add more indexes.

Correct answer: Use parameterized queries.

Parameterized queries, also known as prepared statements, are the most effective way to prevent SQL injection attacks. They separate the SQL code from the user-supplied data, ensuring that user input is treated as literal values rather than executable commands. This prevents malicious input from altering the intended query structure.

Free ADC Security Protocols & Access Control Questions and Answers

What is the main purpose of access control in a database?