ITBP301_Chapter 08

Which type of user in an RBAC system is responsible for managing sensitive or general roles?

• Application owner
• End user
• Administrator
• Guest user

Which of the following is an example of an inference channel?

• Using metadata to deduce hidden relationships
• Directly accessing a restricted column
• Modifying a view definition
• Backing up sensitive data

Which technique prevents inference attacks by adding noise to query results?

• Query restriction
• Data perturbation
• View merging
• Row-level locking

Which level of encryption applies to specific fields within a table?

• Record-level encryption
• Attribute-level encryption
• Table-level encryption
• Row-level encryption

Which cloud deployment model is owned and operated by a single organization?

• Public cloud
• Private cloud
• Community cloud
• Hybrid cloud

Which of the following are types of administrative policies supported by DBMS access control systems? (Choose all that apply)

• Centralized administration
• Decentralized administration
• Hierarchical administration
• Ownership-based administration

Which of the following best describes inference in database security? (Choose all that apply)

• Unauthorized modification of data
• Deduction of sensitive information from authorized queries
• Use of metadata to infer hidden relationships
• Direct access to restricted columns

Which of the following statements are true about statistical databases (SDBs)? (Choose all that apply)

• They only store raw transactional data.
• They provide aggregate statistics like counts and averages.
• They support both nonstatistical and statistical users.
• They are immune to inference attacks.

Which of the following are reasons for implementing database encryption? (Choose all that apply)

• To improve database performance
• To protect data confidentiality
• To reduce storage requirements
• To secure data at rest

Which of the following are deployment models defined by NIST for cloud computing? (Choose all that apply)

• Public cloud
• Private cloud
• Hybrid cloud
• Corporate cloud