DBMS FINAL EXAM MCQ 2024-25

Which model restricts access based on security classifications of both users and data?

• Role-Based Access Control

• Mandatory Access Control

• Discretionary Access Control

What is the main risk of improperly configured database backup storage?

• It slows down data restoration.

• It increases license costs.

• It may expose sensitive historical data.

In which situation is RSA preferred over AES?

• Encrypting large database files

• Encrypting small pieces of data or keys

• Real-time communication of logs

Which access control model is most flexible but can lead to privilege sprawl if unmanaged?

• Discretionary Access Control

• Role-Based Access Control

• Mandatory Access Control

Why is malware considered a serious database threat?

• It only affects user interface settings.

• It can silently extract data and credentials.

• It can only function in offline environments.

A key feature of RBAC is that:

• Roles are assigned based on user behavior analytics

• Each user manually configures their own privileges

• Permissions are grouped by job functions

What is one limitation of password-based authentication?

• It cannot be used on mobile devices

• It is immune to phishing

• It is vulnerable to brute-force attacks

Which user typically has read-only access to system logs and historical data?

• End-user

• Developer

• Auditor

Which form of attack could a rogue input like 'OR 1=1-- be used in?

• SQL Injection

• DoS

• Credential stuffing

Why is encryption not enough by itself to secure a database?

• It reduces data quality

• It doesn’t prevent privilege escalation or misuse

• It always slows down the system significantly