Deck 5: Database and Cloud Security

Question 1

T F 4. The value of a primary key must be unique for each tuple of its table.

Answer 1

True

Question 2

A(n) __________ is a structured collection of data stored for use by one or more applications.

A) attribute
B) database
C) tuple
D) inference

Answer 2

B

Question 3

A view cannot provide restricted access to a relational database so it cannotbe used for security purposes.

Answer 3

False

Question 4

To create a relationship between two tables, the attributes that define theprimary key in one table must appear as attributes in another table, where they are referred to as a foreign key.

Question 5

SQL Server allows users to create roles that can then be assigned accessrights to portions of the database.

Question 6

Site security of the data center itself includes barriers to entry, coupled withauthentication techniques for gaining physical access.

Question 7

A foreign key value can appear multiple times in a table.

Question 8

Encryption becomes the last line of defense in database security.

Question 9

Security specifically tailored to databases is an increasingly importantcomponent of an overall organizational security strategy.

Question 10

The database management system makes use of the database descriptiontables to manage the physical database.

Question 11

A query language provides a uniform interface to the database.

Question 12

A _________ is defined to be a portion of a row used to uniquely identify a row in a table.

A) foreign key
B) query
C) primary key
D) data perturbation

Question 13

A data center generally includes backup power supplies.

Question 14

Two disadvantages to database encryption are key management andinflexibility.

Question 15

In a relational database rows are referred to as _________.

A) relations
B) attributes
C) views
D) tuples

Question 16

Network security is extremely important in a facility in which such a largecollection of assets is concentrated in a single place and accessible by external network connections.

Question 17

A single countermeasure is sufficient for SQLi attacks.

Question 18

Fixed server roles operate at the level of an individual database.

Question 19

In relational database parlance, the basic building block is a __________, which is a flat table.

A) attribute
B) tuple
C) primary key
D) relation

Question 20

The basic building block of a __________ is a table of data, consisting of rows and columns, similar to a spreadsheet.

A) relational database
B) query set
C) DBMS
D) perturbation

Question 21

_________ is an organization that produces data to be made available for controlled release, either within the organization or to external users.

A) Client
B) Data owner
C) User
D) Server

Question 22

With ___________ administration the owner (creator) of a table may grant and revoke access rights to the table.

Question 23

A(n) __________ is a user who has administrative responsibility for part or all of the database.

A) administrator
B) database relations manager
C) application owner
D) end user other than application owner

Question 24

__________ is an organization that receives the encrypted data from a data owner and makes them available for distribution to clients.

A) User
B) Client
C) Data owner
D) Server

Question 25

An end user who operates on database objects via a particular application but does not own any of the database objects is the __________.

A) application owner
B) end user other than application owner
C) foreign key
D) administrator

Question 26

__________ is the process of performing authorized queries and deducing unauthorized information from the legitimate responses received.

A) Perturbation
B) Inference
C) Compromise
D) Partitioning

Question 27

In addition to granting and revoking access rights to a table, in a ___________ administration the owner of the table may grant and revoke authorization rights to other users, allowing them to grant and revoke access rights to the table.

Question 28

__________ specifies the minimum requirements for telecommunications infrastructure of data centers.

A) TIA-492
B) RFC-4949
C) NIST-7883
D) RSA-298

Question 29

A __________ is a suite of programs for constructing and maintaining the database and for offering ad hoc query facilities to multiple users and applications.

Question 30

__________ is a standardized language that can be used to define schema, manipulate, and query data in a relational database.

Question 31

In a relational database columns are referred to as _________.

Question 32

In a discretionary access control environment database users are classified into three broad categories: administrator, end user other than application owner, and __________.

Question 33

The __________ attack typically works by prematurely terminating a text string and appending a new command.

Question 34

The information transfer path by which unauthorized data is obtained is referred to as an ___________ channel.

Question 35

A _________ is the result of a query that returns selected rows and columns from one or more tables.

Question 36

A ___________ is the portion of the data center that houses data processing equipment.

A) computer room
B) main distribution area
C) entrance room
D) horizontal distribution area

Question 37

In a ___________ administration a small number of privileged users may grant and revoke access rights.

Question 38

__________ encompasses intrusion detection, prevention and response.

A) Intrusion management
B) Security assessments
C) Database access control
D) Data loss prevention

Question 39

__________ houses cross-connects and active equipment for distributing cable to the equipment distribution area.

A) Main distribution area
B) Equipment distribution area
C) Horizontal distribution area
D) Zone distribution area

Question 40

A _________ is a virtual table.

A) tuple
B) query
C) view
D) DBMS

Question 41

The __________ form of attack injects code in one or more conditional statements so they always evaluate to true.

Question 42

_________, out-of-band, and inferential are the three main categories of SQLi attack types.

Question 43

The Telecommunications Industry Association standard _________ specifies the minimum requirements for telecommunications infrastructure of data centers.

Question 44

A __________ language provides a uniform interface to the database for users and applications.

Question 45

A __________ is an enterprise facility that houses a large number of servers, storage devices, and network switches and equipment.