Database Security Essentials

What is the purpose of access control mechanisms in databases?

• To enhance the speed of database queries.

• To increase the storage capacity of the database.

• To restrict and manage user access to database resources.

• To automate data backup processes.

Name two types of access control models used in database security.

• Time-Based Access Control (TBAC)

• Network Access Control (NAC)

• Role-Based Access Control (RBAC), Discretionary Access Control (DAC)

• Mandatory Access Control (MAC)

What is the principle of least privilege in access control?

• The principle of least privilege in access control is the practice of limiting user permissions to only what is necessary for their role.

• Restricting access based on user age rather than role

• Allowing users to modify their own permissions

• Granting all users full access to the system

Describe the difference between full backup and incremental backup.

• Both full and incremental backups capture all data at the same time.

• A full backup is faster than an incremental backup because it only captures changes.

• A full backup only captures changes since the last backup, while an incremental backup captures all data.

• A full backup captures all data, while an incremental backup only captures changes since the last backup.

What is a recovery point objective (RPO) in backup strategies?

• RPO refers to the frequency of backup operations.

• RPO is the total time taken to complete a backup.

• RPO is the minimum required storage space for backups.

• RPO is the maximum acceptable amount of data loss measured in time.

Explain the importance of regular database backups.

• Backups can be ignored if the database is small.

• Regular database backups are only necessary for large companies.

• Database backups are primarily for improving performance.

• Regular database backups are essential for data protection, recovery from failures, and ensuring business continuity.

What are the common user authentication methods used in databases?

• Username and password, token-based authentication, multi-factor authentication, biometric authentication, OAuth.

• Single sign-on (SSO)

• Email verification

• Password recovery questions

How does multi-factor authentication enhance database security?

• Multi-factor authentication enhances database security by requiring multiple forms of verification, reducing the risk of unauthorized access.

• It allows unlimited access to all users without verification.

• It eliminates the need for passwords entirely.

• It enhances security by encrypting all database entries.

What is the role of encryption in user authentication?

• Encryption is used to store user passwords in plain text.

• Encryption allows users to bypass authentication altogether.

• Encryption secures user credentials, preventing unauthorized access during authentication.

• Encryption speeds up the authentication process.

What is database auditing and why is it important?

• Database auditing is the process of deleting unnecessary data from the database.

• Database auditing is only relevant for large organizations with sensitive information.

• Database auditing is a method of optimizing database performance.

• Database auditing is the process of monitoring and recording database activities to ensure security and compliance.