wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

Database Security

Total questions: 20

Worksheet time: 7mins

Name
Class
Date
1.

What is required for controlling concurrent execution of the operations that take place on a database?

a)

Serializable

b)

Schedule

c)

Concurrency Control

d)

Lock Point

2.

----------- algorithm starts by finding log records for operations that were not written to disk on crash and then replays all of them.

a)

Shadow Paging

b)

Two Phase Locking

c)

Serial Schedules

d)

ARIES

3.

In which lock the data item can be both reads as well as written by the transactions.

a)

Exclusive Lock

b)

Shared Lock

c)

Two Phase Locking

d)

Strict Two Phase Locking

4.

In which situation where in two or more transactions are waiting for each other to be finished but none of the task is willing to give up the resources that other task needs.

a)

ARIES

b)

Shadow Paging

c)

Deadlock

d)

Two Phase Locking

5.

Which refers to the array of controls, tools, and procedures designed to ensure and safeguard confidentiality, integrity, and accessibility.

a)

Database Security

b)

SQL Injection Attacks

c)

SQLi Attack Avenues

6.

what serve as the first line of defense in DiD database security.

a)

Data encryption

b)

Authentication

c)

Firewalls

d)

Authorization

7.

----------- is code injection technique that can compromise your database.

a)

SQLi Attack Avenues

b)

Data encryption

c)

Auditing

d)

SQL Injection

8.

----------- Injections obtain information about the database structure from error messages issued by the database server.

a)

Union-Based SQL

b)

Error-Based SQL

c)

Blind Boolean-Based SQL

d)

Blind Time-Based SQL

9.

----------- Injection works by submitting a SQL query to the database and forcing the application to produce a different response depending on whether the query returns TRUE or FALSE.

a)

Blind Boolean-Based SQL Injections

b)

Blind Time-Based SQL Injections

c)

Union-Based SQL Injections

d)

Error-Based SQL Injections

10.

----------- is both network-based and host-based. It can be tuned to detect SQL injection attacks.

a)

Web Application Firewall

b)

Threat detection

c)

Data encryption

d)

Intrusion Detection System

11.

----------- is the process of proving the user is who he or she claims to be by entering the correct user ID and password.

a)

Authorization

b)

Authentication

c)

Firewalls

d)

Access control

12.

In which injection technique where the attacker sends malicious SQL queries directly through the application interface?

a)

Out-of-band SQL Injection

b)

Blind SQL Injection

c)

Error-based SQL Injection

d)

In-band SQL Injectio

13.

----------- can be defined at various levels, such as the database, schema, or object level, providing granular control over access rights.

a)

Roles

b)

Privileges

c)

Access Control Lists

d)

Audit Trails

14.

----------- was developed using a nondiscretionary model, in which people are granted access based on an information clearance.

a)

Mandatory Access Control

b)

Discretionary Access Control

c)

Role Based Access Control

d)

Attribute Based Access Control

15.

----------- encryption technique is selectively encrypts specific columns within a database table.

a)

Full Database Encryption

b)

File-level Encryption

c)

Column-level Encryption

d)

All the above

16.

----------- is a security system that controls who can access a database or system based on their role in the organization.

a)

Discretionary Access Control

b)

Mandatory Access Control

c)

Attribute Based Access Control

d)

Role Based Access Control

17.

----------- capture information such as who accessed the database, what actions were performed, and when they occurred.

a)

Access Control Lists

b)

Audit Trails

c)

Authorization

d)

Roles

18.

----------- method protect sensitive information from indirect disclosure.

a)

Parameterized Queries

b)

Flow Control

c)

Encryption

d)

Inference control

19.

----------- statement is used to give specific privileges to users or roles.

a)

Either REVOKE or ROLLBACK

b)

GRANT

c)

REVOKE

d)

ROLLBACK

20.

Periodically changing encryption keys enhances security by limiting the window of opportunity for attackers.

a)

Key Generation

b)

Key Storage

c)

Key Rotation

d)

All the above