Types of Database Security Controls

What is the primary purpose of access control in databases?

• To increase data redundancy

• The primary purpose of access control in databases is to restrict unauthorized access to data.

• To simplify data retrieval processes

• To enhance database performance

Which of the following is a common method of database authentication?

• Single sign-on authentication

• Two-factor authentication

• Username and password authentication

• Biometric authentication

What does database auditing help to track?

• Changes made to the database, user access, and actions performed.

• Network traffic analysis

• Data backup schedules

• Database performance metrics

Why is regular database backup important?

• Regular database backup is important to prevent data loss and ensure data recovery.

• Database backups can be done once a year without issues.

• Regular database backup is only necessary for large companies.

• Data loss is not a concern if the database is on the cloud.

What is the role of passwords in database security?

• Passwords allow unrestricted access to all database users.

• Passwords are used to encrypt data in databases.

• Passwords restrict access to authorized users, protecting sensitive data in databases.

• Passwords are primarily for user identification, not security.

How does encryption protect data in a database?

• Encryption is only necessary for data stored on physical devices.

• Encryption slows down database performance without any security benefits.

• Encryption protects data in a database by converting it into a secure format that is unreadable without the proper decryption key.

• Encryption makes data more accessible to unauthorized users.

What are the two main types of access control?

• User-Based Access Control (UBAC) and Time-Based Access Control (TBAC)

• Network Access Control (NAC) and Physical Access Control (PAC)

• Discretionary Access Control (DAC) and Mandatory Access Control (MAC)

• Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC)

What is the difference between authentication and authorization?

• Authentication is the process of logging in only.

• Authorization is the act of verifying a password.

• Authentication and authorization are the same process.

• Authentication verifies identity; authorization grants access.

What is a common tool used for database auditing?

• Oracle Audit Vault

• Apache Hadoop

• MySQL Workbench

• Microsoft Excel

What is the recommended frequency for database backups?

• Hourly for critical databases

• Monthly for all databases

• Daily for critical databases, weekly for less critical data.

• Yearly for all data