Database Security Quiz

What is the primary purpose of access control in database security?

• To increase the database's performance

• To ensure data is only accessible to authorized users

• To encrypt the data stored in the database

• To make the database accessible to as many users as possible

Which of the following is NOT a common method of access control?

• Role-Based Access Control (RBAC)

• Mandatory Access Control (MAC)

• Discretionary Access Control (DAC)

• Random Access Control (RAC)

What does encryption provide in terms of database security?

• Faster access to data

• A method to prevent SQL injection

• Protection of data at rest and in transit from unauthorized access

• A way to increase the storage space

Which encryption technique involves the sender and receiver using the same key?

• Asymmetric encryption

• Symmetric encryption

• Hashing

• Tokenization

What is the main difference between symmetric and asymmetric encryption?

• Symmetric encryption is faster but less secure than asymmetric encryption.

• Asymmetric encryption uses the same key for encryption and decryption, while symmetric does not.

• Symmetric encryption uses a pair of keys for encryption and decryption, while asymmetric uses a single key.

• Asymmetric encryption is used only for database security, while symmetric is not.

Which of the following best describes role-based access control (RBAC)?

• Access permissions are granted to users based on their specific role within an organization.

• Access is controlled by the system administrator without any specific roles.

• Users can decide who gets access to their data.

• Access is randomly assigned to users.

What is the purpose of a public key in asymmetric encryption?

• To decrypt the data that has been encrypted with the private key

• To encrypt data that can only be decrypted by a matching private key

• To act as a shared secret between communicating parties

• To provide a backup in case the private key is lost

Which of the following is a characteristic of Mandatory Access Control (MAC)?

• It allows owners of the data to decide on access permissions.

• It is based on a user's role within an organization.

• Access permissions are based on regulations and cannot be changed by users.

• It is the least restrictive form of access control.

In the context of database security, what is SQL injection?

• A method of encrypting SQL databases

• A technique used to speed up database queries

• An attack that involves inserting malicious SQL statements into an entry field for execution

• A form of symmetric encryption

What is the main advantage of using encryption for data at rest in a database?

• It makes the data unreadable to unauthorized users even if they gain physical access to the storage medium.

• It significantly increases the speed of data retrieval.

• It reduces the amount of storage space required for the database.

• It allows for easier data sharing between departments within an organization.