WorksheetsDBMS, Security, and Data Systems Worksheet MCQs (Grade 13)
Total questions: 150
Worksheet time: 75hrs 0mins
Automated indexing in modern DBMS:
Uses AI to create/drop indexes based on query patterns
Deletes indexes
Ignores indexes
Manual only
What is business continuity planning (BCP)?
Business encryption
Ensuring operations continue post-disaster
Planning queries
No planning
What is session hijacking?
Session encryption
Stealing active user sessions to gain access
No sessions
Hijacking queries
Inverted indexes are commonly used in:
Relational DBMS for primary keys
Buffer management
Text search and information retrieval
RAID setups
What is Discretionary Access Control (DAC) in DBMS?
Access based on mandatory labels like security clearances
No access control mechanism
Owners granting permissions to others at their discretion
Access controlled solely by roles
Automated compression:
Manual compression
Compression deletion
Reduces storage
No compression
What is zero-trust security in DBMS?
Assuming no trust, verifying every access
No auditing
Trusting all internal users
Zero encryption
In DBMS, a trigger can be used for security by:
Automatically enforcing rules or logging changes
Optimizing performance
Querying data
Creating tables
What is a database schema?
A query to retrieve data
The actual data stored in the database
A backup copy of the database
The structure or blueprint of the database, including tables and relationships
The SQL language is used for:
Hardware configuration
Network management
Defining, manipulating, and controlling data in relational databases
Programming applications
Automation in big data with Kafka:
No kafka
Manual kafka
Kafka deletion
Automates streaming pipelines
Git for DB schemas:
Git deletion
No git
Versions changes
Manual git
Which RAID level uses striping with dedicated parity disks?
RAID 0
RAID 1
RAID 3
RAID 5
What is RTO in backup and recovery?
Data encryption time
Recovery Point Objective
Recovery Time Objective - time to restore operations
Backup frequency
Automated encryption rotation:
Manual rotation
Rotation deletion
No rotation
Changes keys periodically
What is a side-channel attack?
Side encryption
Channel optimization
Direct access
Exploiting indirect information like timing or power usage
Durability in ACID ensures:
Changes are permanent after commit
Data is compressed
No concurrency issues
Transactions are fast
Disaster recovery plan (DRP) includes:
Query plans
Procedures for restoring after major disruptions
Only backups
No planning
ETL automation tools include:
ETL encryption
Talend or Apache NiFi for data flows
No ETL
Manual ETL
In DBMS, authentication refers to:
Logging user activities
Encrypting data at rest
Granting permissions to access data
Verifying the identity of a user
RAID 5 features:
Single parity disk
Mirroring only
No parity
Distributed parity across disks
For a table to be in 2NF, it must:
Have no primary key
Have repeating groups
Allow transitive dependencies
Be in 1NF and have no partial dependencies
Data pipeline automation with Luigi:
Manages dependencies in workflows
Manual pipelines
No pipelines
Pipeline deletion
Bitmap indexes are efficient for:
Low-cardinality attributes with bit vectors
Hash-based searches
Range queries only
High-cardinality attributes
In big data, HDFS backups use:
No backups
HDFS encryption
Snapshots and distcp for copying
Big queries
Automated ETL with Informatica:
Designs data flows
No etl
Etl deletion
Manual etl
A data warehouse is designed for:
Analytical processing and decision support
Small-scale storage
Real-time updates
Transaction processing
Robotic Process Automation (RPA) in DBMS:
Automates routine data tasks
Manual RPA
No RPA
RPA deletion
Machine learning for anomaly detection in DB:
No ML
Manual ML
Automates security monitoring
ML deletion
What is a buffer overflow attack?
A logging overflow
Exploiting memory vulnerabilities to inject code
Overflowing buffers with data
Network buffer
What is SQL injection?
Submitting malicious SQL via inputs to manipulate or access the database
Encrypting SQL queries to protect data
Optimizing queries to improve performance
Backing up tables to prevent data loss
SQL injection is:
A way to encrypt SQL statements
A method to optimize queries
An attack inserting malicious SQL code via input fields
A logging technique
Automated data masking:
No masking
Masking deletion
Obfuscates sensitive data
Manual masking
Shadow paging is a recovery technique using:
Paging queries
Copy pages for non-overwrite updates
No pages
Shadow encryption
In DBMS, what is an 'extent'?
An index entry
A contiguous allocation of blocks for a file
A single record
A buffer frame
In a hierarchical data model, data is organized in which structure?
Graphs with nodes and edges
Tables
Tree-like structure with parent-child relationships
Key-value pairs
In SQL, the GRANT command is used to:
Encrypt data
Assign privileges to users or roles
Revoke permissions
Create tables
Bulk-logged recovery model is best for:
No bulk operations
Minimal logging of bulk operations
Encrypted backups
Full point-in-time recovery always
What is a candidate key?
A foreign key in disguise
A key used only for encryption
A minimal superkey that can uniquely identify a tuple
A key that is not unique
In SQL Server, the simple recovery model:
Requires manual log backups
Automatically truncates the transaction log
Allows point-in-time recovery
Is used for bulk operations only
What is database automation in DBMS?
Deleting databases automatically
Ignoring performance issues
Using tools and scripts to streamline DB operations like provisioning and tuning
Manual management of all tasks
Database security baselines are:
No baselines
Standard configurations for secure setups
Query baselines
Baseline encryption
Which of the following is NOT a characteristic of a database?
Data integrity
Data independence
Data redundancy
Concurrent access
Authorization in DBMS involves:
Backing up the database
Determining what actions a verified user can perform
Compressing data
Indexing tables
What is tokenization in data security?
Encrypting tokens
Replacing sensitive data with non-sensitive tokens
Indexing tokens
Deleting data
Log shipping in DBMS is:
Shipping physical disks
Sending transaction logs to a secondary for recovery
Log encryption
Deleting logs
What is a transaction in DBMS?
A database backup
A logical unit of work that must be entirely completed or aborted
A single query
A user login session
What is the primary function of storage architecture in a DBMS?
To perform data encryption
To manage user interfaces
To organize and access data efficiently on persistent storage devices
To handle query optimization
What is the Bell-LaPadula model in MAC?
Role-based only
Focuses on confidentiality with no read-up, no write-down
Allows all access
For integrity only
Database sharding impacts security by:
No impact
Distributing data, requiring consistent security across shards
Centralizing data
Sharding encryption
Media recovery involves:
Network issues
Software crashes
Recovering from disk failures using backups
Query optimization
Automated alerting in monitoring:
Alerting deletion
Notifies on thresholds
Manual alerting
No alerting
What is secure multi-party computation (SMPC)?
No computation
Insecure computation
Allowing computations on data from multiple parties without revealing inputs
Single party only
The REVOKE command in SQL does what?
Removes previously granted privileges
Audits user actions
Backs up data
Grants new permissions
ML for query tuning:
Manual ml
No ml
Ml deletion
Suggests improvements
Isolation in ACID means:
Transactions do not interfere with each other
Only one user can access the database
Transactions are permanent
Data is isolated from backups
In DBMS, what is the purpose of a buffer pool?
To encrypt data on disk
To manage network connections
To cache frequently accessed data pages in memory
To store permanent data backups
What is tail-log backup?
Full tail backup
Index tail
No log
Backup of log after failure before restore
Which of the following is a key component of the Entity-Relationship (ER) model?
Tables and queries
Entities, attributes, and relationships
Classes and methods
Files and directories
What is data integrity?
Deleting old data
Storing data in multiple places
Compressing data
Ensuring data is accurate, consistent, and reliable
RAID 10 combines:
Parity only
Striping only
Striping and mirroring
Double parity
Fixed-length records are advantageous because:
They simplify address calculations and reduce overhead
They are used in heap files only
They allow variable data sizes
They require more space
In DBMS, a firewall helps security by:
Auditing logs
Creating views
Encrypting data
Controlling network traffic to the database server
What is the CIA triad in information security?
Create, Insert, Alter
Compression, Indexing, Archiving
Confidentiality, Integrity, Availability
No triad
Failback means:
Backing fails
Returning to primary after failover
Fail logs
No return
What is a checkpoint in DBMS recovery?
Backup start
Query checkpoint
Encryption check
Point where dirty pages are written to disk
In object-oriented databases, data is stored as:
Key-value pairs
Trees
Objects with attributes and methods
Tables
What is Big Data characterized by?
Structured data only
Volume, Velocity, Variety (3Vs)
Only large volume
Low speed processing
The buffer replacement policy 'LRU' stands for:
Last Recently Used
Most Recently Used
Least Recently Used
Least Frequently Used
Denormalization is performed to:
Eliminate all keys
Achieve higher normal forms
Encrypt data
Increase redundancy for better performance
What is database mirroring?
Encrypting mirrors
Mirroring indexes
Real-time copying to a secondary server for failover
Backing up to tape
What is the purpose of RAID in storage architecture?
To manage memory buffers
To create indexes
To increase data redundancy and performance through disk arrays
To compress data
Automated security scans in DBMS:
Manual scans
Scan deletion
Use tools like SQLMap for vulnerability checks
No scans
Compliance standards like GDPR focus on:
Data privacy and protection
Backup frequency
Storage optimization
Query speed
Compression in backups:
Increases size
Compresses queries
Reduces storage size
No effect
What is row-level security (RLS)?
Indexing rows
Encrypting rows
Restricting access to specific rows based on policies
Deleting rows
AI for predictive maintenance in DB:
Ai deletion
No ai
Manual ai
Forecasts failures
Reverse delta backups store:
Delta encryption
No delta
Differences backward from latest full
Reverse queries
Automated disaster recovery:
Failover scripts
Dr deletion
No dr
Manual dr
Hot standby is:
Immediate failover ready secondary
Offline
Periodic updates
No standby
What is metadata in DBMS?
Data about data
Backup data
Actual user data
Encrypted data
What is auto-scaling in big data DBMS like Cassandra?
Scaling queries
No scaling
Manual scaling
Automatically adding/removing nodes based on load
Database anomaly detection involves:
Identifying unusual patterns in access or queries
Backing up anomalies
Normalizing data
Creating indexes
Automated compliance checks:
Compliance deletion
Scans for regulations
No compliance
Manual compliance
Scripting for automation in DBMS uses:
No scripting
Manual scripts only
Scripting deletion
PL/SQL or Python for tasks like backups
What is the main advantage of hashed file organization?
No need for overflow handling
Always uses less space than sequential files
Supports range queries efficiently
Fast average-case access for equality searches
Snapshot backups capture:
Logs only
Future state
No state
Point-in-time state using storage features
What is deduplication in backups?
Duplicating data
No removal
Encrypting duplicates
Removing duplicate data to save space
Automated index rebuild:
Optimizes performance
Manual rebuild
Rebuild deletion
No rebuild
In DBMS, undo phase in recovery:
Undoes backups
Undo logs
Rolls back uncommitted transactions
No undo
Backup verification ensures:
Verification ignored
Encryption verified
Data deleted
Backups are restorable and valid
What is bare-metal recovery?
Metal encryption
Restoring entire system including OS
Bare data
No restore
In DBMS, security involves:
Data redundancy
Normalization
Authorization, authentication, and encryption
Incremental backup in DBMS backs up:
Changes since the last incremental or full backup
All data every time
Schema only
Only deleted data
What is a privilege escalation attack?
Revoking all privileges
Gaining higher access levels than authorized
Auditing escalations
Encrypting privileges
What is column-level encryption?
Encrypting specific sensitive columns (e.g., credit cards)
No encryption
Encrypting indexes only
Encrypting entire databases
Indexes in databases are used to:
Store data redundantly
Enforce integrity
Speed up data retrieval
Perform backups
What is API security in DBMS?
Query APIs
API encryption only
Protecting database APIs from abuse (e.g., rate limiting)
No APIs
In cloud DBMS, automated patching:
No patching
Applies security updates without downtime
Patching deletion
Manual patching
In RAID 0, data is:
Stored on a single disk
Protected with parity bits
Mirrored for redundancy
Striped across disks without parity
In DBMS, what does data independence mean?
Data is stored in independent files
Data is only accessible by one user
Data can be changed without affecting applications
All data is redundant
Automated sharding in big data:
Sharding deletion
Distributes data automatically for scale
Manual sharding
No sharding
A foreign key in a table refers to:
A duplicate value
An index for faster searches
A primary key in another table
A unique key in the same table
Columnar storage is beneficial for:
Transactional updates
Row-wise inserts
Analytical queries scanning few columns
Full row retrievals
Kubernetes for DBMS automation:
Orchestrates containerized DBs for scaling
No orchestration
Manual k8s
K8s deletion
What is 'garbage collection' in SSDs?
RAID parity calculation
Buffering writes
Indexing data
Erasing and reclaiming invalid pages
What is the primary goal of database security?
To optimize query performance
To manage data backups
To increase data redundancy
To protect data from unauthorized access, modification, or destruction
Automated user provisioning:
Manual users
No users
Creates users via scripts
User deletion
In big data, HDFS uses:
Tape backups
Single disk storage
In-memory only
Block-based replication across nodes
What is Infrastructure as Code (IaC) for DBMS?
No code
Automating DB setup via code like Terraform
Manual infra
Code deletion
What is a deadlock in DBMS?
Data redundancy
A successful transaction commit
A situation where two or more transactions wait indefinitely for each other
A backup process
3NF requires that a table is in 2NF and:
Has no transitive dependencies
Allows multivalued attributes
Has partial dependencies
Lacks a primary key
What is synthetic full backup?
Synthetic encryption
Full queries
Combining incremental to create full without source load
No synthetic
The full recovery model in DBMS supports:
No log backups
Automatic data loss
Point-in-time restores using log backups
Only full backups
DataOps automates:
No dataops
Data lifecycle
Manual dataops
Dataops deletion
Serverless DB like Aurora automates:
Serverless deletion
No serverless
Scaling and maintenance
Manual server
Automated load balancing in DBMS:
Serverless deletion
No serverless
Scaling and maintenance
Manual server
A common database security certification is:
Backup cert
ISO 27001 for information security management
SQL standard
Data compression cert
Zabbix for DB monitoring:
Automates alerts
Manual zabbix
No zabbix
Zabbix deletion
What is a common threat in statistical databases?
Inference attacks deriving sensitive info from aggregates
Network eavesdropping
Direct access attacks
Physical theft
Recovery testing should be:
Regular to validate procedures
Test encryption
No testing
Testing queries
A superkey is:
A subset of attributes that uniquely identifies a tuple
Always a primary key
A set of attributes that may include extras but uniquely identifies a tuple
A foreign key
Hot backup allows:
Logs ignored
Backups while database is operational
Shutdown required
No consistency
File-level backups are:
No files
Granular for individual files
File encryption
Block only
Grandfather-father-son is a:
A backup rotation scheme
A database normalization rule
A user role hierarchy
A query optimization strategy
Automated testing for DB includes:
Unit tests for stored procedures
Manual testing
No testing
Test deletion
The Biba model in MAC emphasizes:
Availability
Confidentiality
Encryption
Integrity with no read-down, no write-up
Automated partitioning in DBMS:
Splits tables for performance
Partitioning deletion
Manual partitioning
No partitioning
A B+ tree differs from a B-tree in that:
It uses hashing
All values are stored in leaf nodes, with internal nodes for navigation
Leaves are not linked
It allows unbalanced structures
What is a honeypot in database security?
An encryption tool
A query optimizer
A decoy system to attract and detect attackers
A backup mechanism
Automated failover in high availability:
Failover deletion
Switches to replica on primary failure
No failover
Manual failover
NoSQL backup strategies include:
No NoSQL
SQL only
NoSQL encryption
Consistent dumps or replication snapshots
What is fanout in a B-tree?
The number of leaf nodes
The number of levels in the tree
The maximum number of children per node
The height of the tree
What does 'seek time' refer to in hard disk drives?
Time to move the read/write head to the correct track
Time for error correction
Time to rotate the disk to the correct sector
Time to transfer data from disk to memory
Referential integrity maintains:
Data redundancy
Consistency between related tables via foreign keys
Null values in primary keys
Duplicate records
To prevent SQL injection, DBMS applications should use:
Plain text inputs
Static SQL only
No input validation
Prepared statements and parameterized queries
A table is in 1NF if:
It has a primary key
It has no composite attributes and no repeating groups
All attributes depend on the primary key
It allows partial dependencies
Automated data cleansing:
Uses scripts to fix inconsistencies
Cleansing deletion
Manual cleansing
No cleansing
Which of the following is considered a secondary storage device in DBMS?
Cache memory
CPU registers
Magnetic disks
RAM
Warm standby server means:
Cold with no data
Always online primary
Secondary server with periodic restores
Hot with real-time sync
What does two-factor authentication (2FA) add to DBMS security?
Query optimization
Automatic data backups
A second verification step beyond passwords
Role creation
In flash-based SSDs, what is 'wear leveling'?
Compressing data
Mirroring
Distributing writes evenly to prolong lifespan
Striping data
PowerShell for DB scripting:
Manual powershell
Automates Windows DB tasks
No powershell
Powershell deletion
Disk backups offer:
Encryption only
No restores
Faster restores than tape
Slower than tape
Automated performance tuning in DBMS involves:
Ignoring query plans
No tuning
Tools like Oracle ADDM or MySQL Advisor for automatic optimizations
Manual indexing always
What is pitting in tape media?
Degradation over time
Tape queries
No pitting
Pitting encryption
Jenkins for DB CI/CD:
Builds pipelines for schema deploys
No jenkins
Jenkins deletion
Manual jenkins
Which ACID property ensures that a transaction is treated as a single unit?
Atomicity
Durability
Isolation
Consistency
Cloud database security often involves:
No responsibility
Shared responsibility models between provider and user
User only
Provider only
Which tool is commonly used for automated database schema migrations?
Liquibase or Flyway
Manual SQL scripts only
Query optimizers
Data encryption tools
