WorksheetsDatabase Security
Total questions: 20
Worksheet time: 7mins
What is required for controlling concurrent execution of the operations that take place on a database?
Serializable
Schedule
Concurrency Control
Lock Point
----------- algorithm starts by finding log records for operations that were not written to disk on crash and then replays all of them.
Shadow Paging
Two Phase Locking
Serial Schedules
ARIES
In which lock the data item can be both reads as well as written by the transactions.
Exclusive Lock
Shared Lock
Two Phase Locking
Strict Two Phase Locking
In which situation where in two or more transactions are waiting for each other to be finished but none of the task is willing to give up the resources that other task needs.
ARIES
Shadow Paging
Deadlock
Two Phase Locking
Which refers to the array of controls, tools, and procedures designed to ensure and safeguard confidentiality, integrity, and accessibility.
what serve as the first line of defense in DiD database security.
Data encryption
Authentication
Firewalls
Authorization
----------- is code injection technique that can compromise your database.
SQLi Attack Avenues
Data encryption
Auditing
SQL Injection
----------- Injections obtain information about the database structure from error messages issued by the database server.
Union-Based SQL
Error-Based SQL
Blind Boolean-Based SQL
Blind Time-Based SQL
----------- Injection works by submitting a SQL query to the database and forcing the application to produce a different response depending on whether the query returns TRUE or FALSE.
Blind Boolean-Based SQL Injections
Blind Time-Based SQL Injections
Union-Based SQL Injections
Error-Based SQL Injections
----------- is both network-based and host-based. It can be tuned to detect SQL injection attacks.
Web Application Firewall
Threat detection
Data encryption
Intrusion Detection System
----------- is the process of proving the user is who he or she claims to be by entering the correct user ID and password.
Authorization
Authentication
Firewalls
Access control
In which injection technique where the attacker sends malicious SQL queries directly through the application interface?
Out-of-band SQL Injection
Blind SQL Injection
Error-based SQL Injection
In-band SQL Injectio
----------- can be defined at various levels, such as the database, schema, or object level, providing granular control over access rights.
Roles
Privileges
Access Control Lists
Audit Trails
----------- was developed using a nondiscretionary model, in which people are granted access based on an information clearance.
Mandatory Access Control
Discretionary Access Control
Role Based Access Control
Attribute Based Access Control
----------- encryption technique is selectively encrypts specific columns within a database table.
Full Database Encryption
File-level Encryption
Column-level Encryption
All the above
----------- is a security system that controls who can access a database or system based on their role in the organization.
Discretionary Access Control
Mandatory Access Control
Attribute Based Access Control
Role Based Access Control
----------- capture information such as who accessed the database, what actions were performed, and when they occurred.
Access Control Lists
Audit Trails
Authorization
Roles
----------- method protect sensitive information from indirect disclosure.
Parameterized Queries
Flow Control
Encryption
Inference control
----------- statement is used to give specific privileges to users or roles.
Either REVOKE or ROLLBACK
GRANT
REVOKE
ROLLBACK
Periodically changing encryption keys enhances security by limiting the window of opportunity for attackers.
Key Generation
Key Storage
Key Rotation
All the above
