WorksheetsDatabase Security Quiz
Total questions: 10
Worksheet time: 5mins
An attacker injects malicious SQL code through a web form input to manipulate backend queries. Which database attack technique is most likely being used?
Cross-Site Scripting (XSS)
SQL Injection
Cross-Site Request Forgery (CSRF)
Directory Traversal
A security team observes repeated database connection attempts with invalid credentials from multiple IPs over a short period. Which countermeasure best mitigates this?
Input validation
CAPTCHA integration and account lockout policies
Parameterized queries
Intrusion Detection Systems (IDS)
In a secure online banking system, a customer disputes a transaction claiming it was never initiated by them. Which mechanism ensures non-repudiation to settle the dispute?
Symmetric encryption keys
Hashing with MD5
Digital Signatures with Public Key Infrastructure (PKI)
Transport Layer Security (TLS)
If non-repudiation fails in a system, what is the most likely consequence?
Data breaches will occur frequently.
Users can deny their actions, reducing accountability.
Confidentiality of data will be compromised.
Availability of services will be lost.
During a Distributed Denial of Service (DDoS) attack, the main security property under threat is:
Integrity
Availability
Confidentiality
Non-repudiation
A hospital's patient portal becomes unavailable due to a ransomware attack. Which best practice improves availability in such cases?
Frequent hashing of patient records
Offsite backups and incident response planning
Enforcing least privilege for doctors
Deploying stronger encryption algorithms
A company adopts Role-Based Access Control (RBAC) for its cloud applications. Which statement about RBAC is FALSE?
Access rights are assigned based on job roles.
It reduces administrative overhead.
It enforces least privilege by default.
Users directly manage their access rights.
Which access control model enforces security labels like "Top Secret" and "Confidential" for both users and resources?
Discretionary Access Control (DAC)
Role-Based Access Control (RBAC)
Mandatory Access Control (MAC)
Attribute-Based Access Control (ABAC)
A company implements firewalls, IDS, application security, and regular patching. This layered approach exemplifies:
Zero Trust Security
Least Privilege Principle
Defense in Depth
Access Control List (ACL)
The Least Privilege Principle primarily aims to:
Give maximum access to employees for efficiency
Reduce the number of security patches needed
Limit user access to only what is necessary
Restrict access based on encryption standards
