NEW
Font size
WorksheetsDatabase Security Quiz
Total questions: 15
Worksheet time: 8mins
What is the primary purpose of access control in database security?
To increase the database's performance
To ensure data is only accessible to authorized users
To encrypt the data stored in the database
To make the database accessible to as many users as possible
Which of the following is NOT a common method of access control?
Role-Based Access Control (RBAC)
Mandatory Access Control (MAC)
Discretionary Access Control (DAC)
Random Access Control (RAC)
What does encryption provide in terms of database security?
Faster access to data
A method to prevent SQL injection
Protection of data at rest and in transit from unauthorized access
A way to increase the storage space
Which encryption technique involves the sender and receiver using the same key?
Asymmetric encryption
Symmetric encryption
Hashing
Tokenization
What is the main difference between symmetric and asymmetric encryption?
Symmetric encryption is faster but less secure than asymmetric encryption.
Asymmetric encryption uses the same key for encryption and decryption, while symmetric does not.
Symmetric encryption uses a pair of keys for encryption and decryption, while asymmetric uses a single key.
Asymmetric encryption is used only for database security, while symmetric is not.
Which of the following best describes role-based access control (RBAC)?
Access permissions are granted to users based on their specific role within an organization.
Access is controlled by the system administrator without any specific roles.
Users can decide who gets access to their data.
Access is randomly assigned to users.
What is the purpose of a public key in asymmetric encryption?
To decrypt the data that has been encrypted with the private key
To encrypt data that can only be decrypted by a matching private key
To act as a shared secret between communicating parties
To provide a backup in case the private key is lost
Which of the following is a characteristic of Mandatory Access Control (MAC)?
It allows owners of the data to decide on access permissions.
It is based on a user's role within an organization.
Access permissions are based on regulations and cannot be changed by users.
It is the least restrictive form of access control.
In the context of database security, what is SQL injection?
A method of encrypting SQL databases
A technique used to speed up database queries
An attack that involves inserting malicious SQL statements into an entry field for execution
A form of symmetric encryption
What is the main advantage of using encryption for data at rest in a database?
It makes the data unreadable to unauthorized users even if they gain physical access to the storage medium.
It significantly increases the speed of data retrieval.
It reduces the amount of storage space required for the database.
It allows for easier data sharing between departments within an organization.
Which of the following is true about hashing in the context of database security?
It is a reversible process used mainly for encrypting passwords.
It is an irreversible process used mainly for verifying data integrity.
It allows for the encryption and decryption of data using a single key.
It is a form of asymmetric encryption.
What is tokenization in the context of database security?
Replacing sensitive data with unique identification symbols that retain all the essential information without compromising its security
A process of transforming data into a random string of characters that cannot be reversed
The use of tokens to grant access to the database
A method of symmetric encryption
Why is it important to regularly update access permissions in a database?
To ensure that the database remains accessible to as many users as possible
To accommodate changes in user roles and prevent unauthorized access
To increase the database's performance over time
To comply with mandatory encryption standards
What role does a certificate authority (CA) play in database encryption?
It acts as a trusted third party to issue digital certificates for public keys.
It provides the encryption software for databases.
It manages the database's access control policies.
It performs regular audits on the database's security.
Which of the following best describes the principle of least privilege in the context of database access control?
Users should be granted the maximum permissions possible to ensure they can perform their duties.
Users should be granted only the permissions necessary to perform their specific tasks.
All users should have equal access to the database to promote transparency.
Permissions should be updated as infrequently as possible to maintain stability.
