Database Security (GROUP 3)

Which of the following best encapsulates the overall purpose of a database security program?

• Only to protect the data stored within the database.

• Only to prevent unauthorized access to the database management system.

• To ensure the physical safety of the server hardware.

• To protect the data, the management system, and any application that accesses it from threats.

When a company considers the frequency of natural disasters in the location of its datacenter, it is primarily addressing which aspect of security?

• Digital Security

• Physical Security

• Access Control

• Compliance

The practice of granting users only the permissions they absolutely need to perform their duties is known as:

• Data Encryption

• The principle of least privilege

• Data Masking

• SQL Injection prevention

What is the recommended method for preventing malicious SQL code from being executed through web application input fields?

• Using default credentials and open ports.

• Regularly auditing database activity.

• Using parameterized queries and validating input.

• Encrypting all data at rest.

The process of altering sensitive information in a way that makes it safe for use in development and testing environments is called:

• Data Encryption

• Data Masking

• Access Control

• Auditing

Encrypting data both while it is being transferred and while it is stored is a fundamental practice for ensuring:

• System performance

• Physical security

• Confidentiality

• Software is up to date

A former employee who uses their old login credentials to steal data is an example of what kind of security problem?

• SQL Injection Attack

• Unpatched Software Vulnerability

• Insider Threat

• Misconfigured Database Setting

Failing to install the latest security updates and service packs for your DBMS software is categorized as which type of vulnerability?

• Unpatched Software Vulnerabilities

• Weak Credentials

• Inadequate Access Control

• Unsecured Database Backups

Which of the following is an example of a misconfigured database setting?

• Leaving unnecessary network ports open.

• Storing database backups without encryption.

• A user having more permissions than required for their job.

• An attacker inserting malicious code into a login form.

A significant security risk occurs when copies of sensitive data are stored without the same security measures as the live database. This problem is known as:

• Lack of Database Activity Monitoring

• Weak/Default Credentials

• Insider Threats

• Unsecured Database Backups