Question 1

Encryption does not prevent data loss, but it can lessen the impact of data loss.

Accepted Answer

Encryption is a security measure that protects data from unauthorized access, but it does not necessarily prevent data loss. However, if data is lost or stolen, encryption can make it much more difficult for anyone to read or use the data without the necessary decryption key or password. Therefore, while encryption does not guarantee data protection, it can significantly reduce the impact of data loss.

Question 2

Which of the following is a reason that Windows authentication is considered more secure than combining Windows and SQL Server authentication.&#10;A)multiple sets of credentials are not required&#10;B)Windows authentication uses the MS-CHAPv2 protocol&#10;C)SQL Server allows for password complexity&#10;D)Windows has a limited range of password policies

Accepted Answer

By using Windows authentication, users do not need to remember multiple sets of credentials, and the authentication process is handled by the Windows operating system, which is generally considered more secure than managing authentication within the SQL Server environment. In contrast, combining Windows and SQL Server authentication requires users to remember different sets of credentials for different systems, which can increase the risk of security breaches through users recording their passwords in insecure locations or using weak passwords. The other options are not relevant to the comparison between Windows and SQL Server authentication.

Question 3

IPSec uses certificates for identity verification.

Accepted Answer

IPSec uses certificates for authentication, not identity verification.

Question 4

Which default account is enabled when SQL Server authentication is enabled using mixed mode?&#10;A)admin&#10;B)root&#10;C)sa&#10;D)superuser

Accepted Answer

The default account that is enabled when SQL Server authentication is enabled using mixed mode is sa (System Administrator). This account has elevated privileges and should be used with caution. It is recommended to create a new login with a strong password and limited permissions rather than using the sa account.

Question 5

All server-level principals have access to the SQL databases.

Accepted Answer

Server-level principals, such as logins, do not automatically have access to SQL databases; they need to be mapped to database users or roles to access specific databases.

Question 6

Which predefined server-level role allows a user to create or alter any database?&#10;A)security admin&#10;B)dbcreator&#10;C)database auditor&#10;D)sysroot

Accepted Answer

The dbcreator role allows a user to create and alter any database, but not to perform other server-level actions. The security admin role allows a user to manage server-level permissions and auditing, but not to create or alter databases. The database auditor role allows a user to monitor activity within a database, but not to create or alter databases. The sysroot role is not a predefined server-level role.

Question 7

Which of the following is NOT an action against a database object that requires a permission?&#10;A)connecting to a database&#10;B)logging in to SQL Server&#10;C)executing a procedure&#10;D)modifying a view

Accepted Answer

Logging in to SQL Server is an action that requires authentication rather than permission on a specific database object. Permissions are required for actions directly involving database objects, such as executing a procedure or modifying a view. Connecting to a database also involves permissions at the database level, but logging into SQL Server itself is about authentication and server-level access control.

Question 8

Which of the following is another term for the layered security model?&#10;A)extreme defenses&#10;B)defense-in-depth&#10;C)security-immersion&#10;D)total-security-strategy

Accepted Answer

Defense-in-depth is another common term used to describe a layered security model which involves implementing multiple layers of security to protect against different types of threats.

Question 9

Which of the following is true about database access control?&#10;A)to access a database the SQL Server login must be mapped to a database user&#10;B)members of the sysadmin server role don't have access to databases by default&#10;C)once a user logs in to the SQL Server, they have automatic access to underlying database objects&#10;D)the database user login name must be different from the server login name

Accepted Answer

To access a database, the SQL Server login must be mapped to a database user. This is done to control access at the database level, and ensure that only authorized users have access to specific databases and their objects.

Question 10

Which action does a user perform that requires the user to provide credentials?&#10;A)decryption of data&#10;B)system logon&#10;C)reading a data record&#10;D)shutting down a system

Accepted Answer

System logon requires the user to provide credentials such as a username and password to access the system. Decryption of data, reading a data record, and shutting down a system do not necessarily require user credentials.

Question 11

Which method of securing client/server connections used by SQL Server 2012 requires implementing a policy on the server and client computers?&#10;A)SSL&#10;B)PPTP&#10;C)IPSec&#10;D)L2TP

Accepted Answer

The answer of Which method of securing client/server connections used...

Question 12

Which of the following is a method to secure client/server connections that uses certificates for identification?&#10;A)IPSec&#10;B)PPTP&#10;C)MS-CHAPv2&#10;D)SSL

Accepted Answer

The answer of Which of the following is a method...

Question 13

AES is a block cipher that translates fixed-size blocks of unencrypted data into corresponding fixed-sized blocks of encrypted data.

Accepted Answer

The answer of AES is a block cipher that translates...

Question 14

Which of the following is true about database permissions?&#10;A)connecting to a database does not require permissions as long as the user is logged on to the server&#10;B)permissions can only be granted to the database as a whole&#10;C)permissions can be granted on a schema&#10;D)tables are securables that group together a collection of objects

Accepted Answer

The answer of Which of the following is true about...

Question 15

Which of the following is an authentication mode supported by SQL Server 2012?&#10;A)Server-instance authentication&#10;B)System level authentication&#10;C)Hybrid authentication mode&#10;D)Mixed authentication mode

Accepted Answer

The answer of Which of the following is an authentication...

Question 16

What should you reduce in order to limit the number of security vulnerabilities in a system?&#10;A)password complexity&#10;B)the number of logins&#10;C)surface area&#10;D)antivirus programs

Accepted Answer

The answer of What should you reduce in order to...

Question 17

Which of the following is NOT a type of security principal that may request access to a SQL server instance?&#10;A)Windows contact&#10;B)Windows account&#10;C)Windows group&#10;D)SQL Server Login

Accepted Answer

The answer of Which of the following is NOT a...

Question 18

Which environments must use SQL Server authentication because Windows authentication cannot be used?&#10;A)Active Directory domains&#10;B)Windows-only networks&#10;C)Web applications&#10;D)multi-domain forests

Accepted Answer

The answer of Which environments must use SQL Server authentication...

Question 19

Which term is best described as a way to group together users for the purposes of managing database permissions?&#10;A)schema&#10;B)role&#10;C)right&#10;D)principal

Accepted Answer

The answer of Which term is best described as a...

Question 20

Security principals can be either users or groups.

Accepted Answer

The answer of Security principals can be either users or...

Question 21

What happens when a users requests access to a SQL Server using Windows authentication?

Accepted Answer

The answer of What happens when a users requests access...

Question 22

How is authentication performed using security principals?

Accepted Answer

The answer of How is authentication performed using security principals?...

Question 23

Which type of encryption uses public and private keys?&#10;A)symmetric&#10;B)point-to-point&#10;C)asymmetric&#10;D)digital

Accepted Answer

The answer of Which type of encryption uses public and...

Question 24

_____________ is designed to render data in the physical data and log files unusable should someone gain unauthorized access.

Accepted Answer

The answer of _____________ is designed to render data in...

Question 25

Which of the following is true about asymmetric encryption algorithms?&#10;A)they use a secret key&#10;B)the same key is used to encrypt and encrypt data&#10;C)the performance is slower than with symmetric algorithms&#10;D)it is the most commonly used form of encryption

Accepted Answer

The answer of Which of the following is true about...

Question 26

What is a symmetric key and what are its advantages and disadvantages?

Accepted Answer

The answer of What is a symmetric key and what...

Question 27

What is the IPSec protocol and under what conditions is its use most appropriate?

Accepted Answer

The answer of What is the IPSec protocol and under...

Question 28

What is the Service Master Key?

Accepted Answer

The answer of What is the Service Master Key?...

Question 29

How do secure Internet transactions use encryption keys?

Accepted Answer

The answer of How do secure Internet transactions use encryption...

Question 30

The default role assigned to every login is the __________ role.

Accepted Answer

The answer of The default role assigned to every login...

Question 31

List and describe three fixed roles that are associated with performing administrative functions on the server.

Accepted Answer

The answer of List and describe three fixed roles that...

Question 32

What SQL function should you use to encrypt an individual data item in a column that lets you choose the encryption algorithm?&#10;A)EncryptByPhrase&#10;B)EncryptColumn&#10;C)EncryptSymmetric&#10;D)EncryptByKey

Accepted Answer

The answer of What SQL function should you use to...

Question 33

Which encryption algorithm is a block cipher that uses a 128-bit block cipher with varying key sizes?&#10;A)AES&#10;B)3-key Triple DES&#10;C)DPAPI&#10;D)EncryptByPhrase

Accepted Answer

The answer of Which encryption algorithm is a block cipher...

Question 34

How is a user granted permission to access a database?

Accepted Answer

The answer of How is a user granted permission to...

Question 35

What are two reasons that Windows authentication is considered to be the most secure method of authenticating with SQL Server?

Accepted Answer

The answer of What are two reasons that Windows authentication...

Question 36

SQL Server can generate a self-signed ______________ to encrypt data.

Accepted Answer

The answer of SQL Server can generate a self-signed ______________...

Question 37

Use of a third-party product can improve the ________ management function that encompasses their generation, storage, distribution and retrieval.

Accepted Answer

The answer of Use of a third-party product can improve...

Question 38

Which of the following is NOT true about roles?&#10;A)there are several predefined database level roles&#10;B)the scope of a role is confined to each table in a database&#10;C)a single user can be assigned to a role&#10;D)roles are used to manage permissions for groups of users

Accepted Answer

The answer of Which of the following is NOT true...

Question 39

What is a permission? Provide examples of permissions for database access.

Accepted Answer

The answer of What is a permission? Provide examples of...

Question 40

__________ authentication mode includes both Windows and SQL Server authentication.

Accepted Answer

The answer of __________ authentication mode includes both Windows and...

Question 41

Match between columns&#10;                        Premises: a type of key that uses the same key to encrypt and decrypt data&#10;a type of key that uses the same key to encrypt and decrypt data&#10;a type of key that uses the same key to encrypt and decrypt data&#10;a type of key that uses the same key to encrypt and decrypt data&#10;a type of key that uses the same key to encrypt and decrypt data&#10;a type of key that uses the same key to encrypt and decrypt data&#10;a type of key that uses the same key to encrypt and decrypt data&#10;a type of key that uses the same key to encrypt and decrypt data&#10;a type of key that uses the same key to encrypt and decrypt data&#10;a type of key that uses the same key to encrypt and decrypt data&#10;the various objects in a database and a SQL Server instance that can be secured&#10;the various objects in a database and a SQL Server instance that can be secured&#10;the various objects in a database and a SQL Server instance that can be secured&#10;the various objects in a database and a SQL Server instance that can be secured&#10;the various objects in a database and a SQL Server instance that can be secured&#10;the various objects in a database and a SQL Server instance that can be secured&#10;the various objects in a database and a SQL Server instance that can be secured&#10;the various objects in a database and a SQL Server instance that can be secured&#10;the various objects in a database and a SQL Server instance that can be secured&#10;the various objects in a database and a SQL Server instance that can be secured&#10;a column value that is unique to the row and is used in conjunction with the key to secure the data being encrypted&#10;a column value that is unique to the row and is used in conjunction with the key to secure the data being encrypted&#10;a column value that is unique to the row and is used in conjunction with the key to secure the data being encrypted&#10;a column value that is unique to the row and is used in conjunction with the key to secure the data being encrypted&#10;a column value that is unique to the row and is used in conjunction with the key to secure the data being encrypted&#10;a column value that is unique to the row and is used in conjunction with the key to secure the data being encrypted&#10;a column value that is unique to the row and is used in conjunction with the key to secure the data being encrypted&#10;a column value that is unique to the row and is used in conjunction with the key to secure the data being encrypted&#10;a column value that is unique to the row and is used in conjunction with the key to secure the data being encrypted&#10;a column value that is unique to the row and is used in conjunction with the key to secure the data being encrypted&#10;a symmetric key used to protect asymmetric private keys and certificates that are stored in the database&#10;a symmetric key used to protect asymmetric private keys and certificates that are stored in the database&#10;a symmetric key used to protect asymmetric private keys and certificates that are stored in the database&#10;a symmetric key used to protect asymmetric private keys and certificates that are stored in the database&#10;a symmetric key used to protect asymmetric private keys and certificates that are stored in the database&#10;a symmetric key used to protect asymmetric private keys and certificates that are stored in the database&#10;a symmetric key used to protect asymmetric private keys and certificates that are stored in the database&#10;a symmetric key used to protect asymmetric private keys and certificates that are stored in the database&#10;a symmetric key used to protect asymmetric private keys and certificates that are stored in the database&#10;a symmetric key used to protect asymmetric private keys and certificates that are stored in the database&#10;it is established using Windows authentication&#10;it is established using Windows authentication&#10;it is established using Windows authentication&#10;it is established using Windows authentication&#10;it is established using Windows authentication&#10;it is established using Windows authentication&#10;it is established using Windows authentication&#10;it is established using Windows authentication&#10;it is established using Windows authentication&#10;it is established using Windows authentication&#10;a user identifier from the Windows operating system that is created when the user initially logs on&#10;a user identifier from the Windows operating system that is created when the user initially logs on&#10;a user identifier from the Windows operating system that is created when the user initially logs on&#10;a user identifier from the Windows operating system that is created when the user initially logs on&#10;a user identifier from the Windows operating system that is created when the user initially logs on&#10;a user identifier from the Windows operating system that is created when the user initially logs on&#10;a user identifier from the Windows operating system that is created when the user initially logs on&#10;a user identifier from the Windows operating system that is created when the user initially logs on&#10;a user identifier from the Windows operating system that is created when the user initially logs on&#10;a user identifier from the Windows operating system that is created when the user initially logs on&#10;a reversible process involving the use of a key or passcode and an algorithm to convert data into an unreadable form&#10;a reversible process involving the use of a key or passcode and an algorithm to convert data into an unreadable form&#10;a reversible process involving the use of a key or passcode and an algorithm to convert data into an unreadable form&#10;a reversible process involving the use of a key or passcode and an algorithm to convert data into an unreadable form&#10;a reversible process involving the use of a key or passcode and an algorithm to convert data into an unreadable form&#10;a reversible process involving the use of a key or passcode and an algorithm to convert data into an unreadable form&#10;a reversible process involving the use of a key or passcode and an algorithm to convert data into an unreadable form&#10;a reversible process involving the use of a key or passcode and an algorithm to convert data into an unreadable form&#10;a reversible process involving the use of a key or passcode and an algorithm to convert data into an unreadable form&#10;a reversible process involving the use of a key or passcode and an algorithm to convert data into an unreadable form&#10;an external entity that issues and verifies digital certificates used for encrypting data&#10;an external entity that issues and verifies digital certificates used for encrypting data&#10;an external entity that issues and verifies digital certificates used for encrypting data&#10;an external entity that issues and verifies digital certificates used for encrypting data&#10;an external entity that issues and verifies digital certificates used for encrypting data&#10;an external entity that issues and verifies digital certificates used for encrypting data&#10;an external entity that issues and verifies digital certificates used for encrypting data&#10;an external entity that issues and verifies digital certificates used for encrypting data&#10;an external entity that issues and verifies digital certificates used for encrypting data&#10;an external entity that issues and verifies digital certificates used for encrypting data&#10;a parameter used in conjunction with a cryptographic algorithm to encrypt data&#10;a parameter used in conjunction with a cryptographic algorithm to encrypt data&#10;a parameter used in conjunction with a cryptographic algorithm to encrypt data&#10;a parameter used in conjunction with a cryptographic algorithm to encrypt data&#10;a parameter used in conjunction with a cryptographic algorithm to encrypt data&#10;a parameter used in conjunction with a cryptographic algorithm to encrypt data&#10;a parameter used in conjunction with a cryptographic algorithm to encrypt data&#10;a parameter used in conjunction with a cryptographic algorithm to encrypt data&#10;a parameter used in conjunction with a cryptographic algorithm to encrypt data&#10;a parameter used in conjunction with a cryptographic algorithm to encrypt data&#10;a cryptographic algorithm used in conjunction with a key to encrypt data&#10;a cryptographic algorithm used in conjunction with a key to encrypt data&#10;a cryptographic algorithm used in conjunction with a key to encrypt data&#10;a cryptographic algorithm used in conjunction with a key to encrypt data&#10;a cryptographic algorithm used in conjunction with a key to encrypt data&#10;a cryptographic algorithm used in conjunction with a key to encrypt data&#10;a cryptographic algorithm used in conjunction with a key to encrypt data&#10;a cryptographic algorithm used in conjunction with a key to encrypt data&#10;a cryptographic algorithm used in conjunction with a key to encrypt data&#10;a cryptographic algorithm used in conjunction with a key to encrypt data

Accepted Answer

The Answer of database master key and access token and is...

Deck 6: SQL Server Security