FREE ADC Security Protocols & Access Control Questions and Answers

Question 1

What is the main purpose of access control in a database?

Accepted Answer

To restrict unauthorized data access.

Answer

The main purpose of access control in a database is to manage and restrict who can view, modify, or delete data. It ensures that only authorized users or applications can perform specific operations, thereby protecting sensitive information and maintaining data security and integrity. This is a critical component of any robust database security strategy.

Question 2

What does authentication verify?

Accepted Answer

User identity.

Answer

Authentication is the process of verifying the identity of a user, system, or application attempting to access a database. It typically involves checking credentials like usernames and passwords against stored information. Successful authentication confirms that the entity is who they claim to be, granting them access based on their authorized permissions and ensuring system security.

Question 3

Which of the following is an example of multi-factor authentication?

Accepted Answer

Password and fingerprint.

Answer

Multi-factor authentication (MFA) requires users to provide two or more distinct verification factors from different categories to gain access. A password represents 'something you know,' while a fingerprint represents 'something you are.' Combining these significantly enhances security by requiring multiple proofs of identity.

Question 4

What is the principle of least privilege?

Accepted Answer

Users get minimum access rights.

Answer

The Principle of Least Privilege dictates that users, programs, or processes should be granted only the minimum necessary permissions to perform their specific tasks. This security best practice limits the potential damage from compromised accounts or systems, reducing the attack surface and preventing unauthorized actions.

Question 5

Which SQL command controls user access to database objects?

Accepted Answer

GRANT

Answer

The `GRANT` SQL command is part of Data Control Language (DCL) and is specifically used to give users or roles permissions to perform certain operations on database objects, such as tables, views, or stored procedures. It allows database administrators to manage who can access and manipulate data within the database.

ADC - Access Data Certification Practice Test

ADC - Access Data Certification Practice Test

FREE ADC Security Protocols & Access Control Questions and Answers