The Database Security Savvy Challenge

1. Encryption at Database, in general, can be enforced in one of the following ways –

  • A Disk blocks containing database data can be encrypted using a key available to the database system software.
  • B Specified or all attributes of a relation can be stored in encrypted form using different encryption keys.
  • C Querying the database happens over an encrypted channel.
  • D Both A and B.

2. A person working with a database has created a data, and later, he denies creating that data. This problem is called _____________, and the use of _________________ helps in solving the problem.

  • A Confidentiality Breach, Decryption
  • B Non-Repudiation, Digital Signature
  • C Improper Access Control, RBAC
  • D Data Leak, Encryption

3. The following are some common and critical events that are considered a minimum requirement to be captured in a Database audit trail

  • A Recording the updating of any tuple in a relation/table
  • B Recording of each and every SQL query that gets executed
  • C Recording of failed logins, login changes, user changes, schema changes, and audit log changes
  • D Recording of timeline view of all changes done to the database relations

4. Why is it important to audit the failed login attempts to a SQL Server?

  • A To diagnose the reason for failed login
  • B To lock the user account against which a failed login is attempted
  • C To identify and pinpoint the access role violations
  • D To trace or get an indication of an attack against SQL Server

5.

Consider the following code snippet where username and password are being provided by the user through a Web Form. The correct login and password pair is (admin, traffic123).

var sql_query = "SELECT name FROM user where username = '" + username + "' and password = '" + password + "'";

Which one of the following demonstrates a successful SQL injection attack where an attacker knows the username but does not know the password? But, he gives input to the password in a way to get access to the server as an admin.


  • A Unknown’ or ‘1’
  • B Unknown’ or ‘1’=’1’
  • C Unknown’ or true
  • D XXX’ or ‘2

Please enter your name