Deck 5: Database Security

Question 1

In relational database parlance,the basic building block is a __________,which is a flat table.

A)attribute
B)tuple
C)primary key
D)relation

Answer 1

D

Question 2

The basic building block of a __________ is a table of data,consisting of rows and columns,similar to a spreadsheet.

A)relational database
B)query set
C)DBMS
D)perturbation

Answer 2

A

Question 3

T F 4.The value of a primary key must be unique for each tuple of its table.

Answer 3

True

Question 4

A census database is an example of a pure statistical database.

Question 5

The simplest form of query restriction is query size restriction.

Question 6

Random-sample query is a simple output perturbation technique.

Question 7

The two commands that SQL provides for managing access rights are
ALLOW and DENY.

Question 8

A foreign key value can appear multiple times in a table.

Question 9

The database management system operates on the assumption that the
computer system has authenticated each user.

Question 10

To create a relationship between two tables,the attributes that define the
primary key in one table must appear as attributes in another table,where they are referred to as a foreign key.

Question 11

In a relational database rows are referred to as _________.

A)relations
B)attributes
C)views
D)tuples

Question 12

A query language provides a uniform interface to the database.

Question 13

A view cannot provide restricted access to a relational database so it cannot
be used for security purposes.

Question 14

A _________ is defined to be a portion of a row used to uniquely identify a row in a table.

A)foreign key
B)query
C)primary key
D)data perturbation

Question 15

Query restriction provides answers to all queries,but the answers are
approximate.

Question 16

SQL Server allows users to create roles that can then be assigned access
rights to portions of the database.

Question 17

Encryption can be applied to the entire database,at the record level,at the
attribute level,or at the level of the individual field.

Question 18

Fixed server roles operate at the level of an individual database.

Question 19

A(n)__________ is a structured collection of data stored for use by one or more applications.

A)attribute
B)database
C)tuple
D)inference

Question 20

A telephone directory is an example of a statistical database.

Question 21

Statistics are derived from a database by means of a ___________.

A)characteristic formula
B)compromise
C)partition
D)data perturbation

Question 22

__________ is when the data in the SDB can be modified so as to produce statistics that cannot be used to infer values for individual records.

A)Data perturbation
B)Inference channeling
C)Database access control
D)Output perturbation

Question 23

The information transfer path by which unauthorized data is obtained is referred to as an ___________ channel.

Question 24

__________ is a standardized language that can be used to define schema,manipulate,and query data in a relational database.

Question 25

A(n)__________ is a user who has administrative responsibility for part or all of the database.

A)administrator
B)database relations manager
C)application owner
D)end user other than application owner

Question 26

__________ is the process of performing authorized queries and deducing unauthorized information from the legitimate responses received.

A)Perturbation
B)Inference
C)Compromise
D)Partitioning

Question 27

A __________ database is one that provides data of a statistical nature such as counts and averages.

Question 28

In a ___________ administration a small number of privileged users may grant and revoke access rights.

Question 29

The __________ cloud infrastructure is a composition of two or more clouds that remain unique entities but are bound together by standardized or proprietary technology that enables data and application portability.

A)hybrid
B)community
C)private
D)public

Question 30

_________ is an organization that produces data to be made available for controlled release,either within the organization or to external users.

A)Client
B)Data owner
C)User
D)Server

Question 31

In addition to granting and revoking access rights to a table,in a ___________ administration the owner of the table may grant and revoke authorization rights to other users,allowing them to grant and revoke access rights to the table.

Question 32

A _________ is a virtual table.

A)tuple
B)query
C)view
D)DBMS

Question 33

__________ is an organization that receives the encrypted data from a data owner and makes them available for distribution to clients.

A)User
B)Client
C)Data owner
D)Server

Question 34

With ___________ administration the owner (creator)of a table may grant and revoke access rights to the table.

Question 35

With __________ the records in the database are clustered into a number of mutually exclusive groups and the user may only query the statistical properties of each group as a whole.

A)compromise
B)inference
C)partitioning
D)query restriction

Question 36

A _________ is the result of a query that returns selected rows and columns from one or more tables.

Question 37

An end user who operates on database objects via a particular application but does not own any of the database objects is the __________.

A)application owner
B)end user other than application owner
C)foreign key
D)administrator

Question 38

A __________ is a suite of programs for constructing and maintaining the database and for offering ad hoc query facilities to multiple users and applications.

Question 39

In a relational database columns are referred to as _________.

Question 40

In a discretionary access control environment database users are classified into three broad categories: administrator,end user other than application owner,and __________.

Question 41

A __________ cloud infrastructure is made available to the general public or a large industry group and is owned by an organization selling cloud services.

Question 42

The __________ is a human entity that presents requests (queries)to the system.

Question 43

The _________ model provides a predefined environment for the cloud subscriber that is shared with other tenants,typically through tagging data with a subscriber identifier.

Question 44

When using the __________ method attribute values are exchanged (swapped)between records in sufficient quantity so that nothing can be deduced from the disclosure of individual records.

Question 45

_________ is a model for enabling ubiquitous,convenient,on-demand network access to a shared pool of configurable computing resources that can be rapidly provisioned and released with minimal management effort or service provider interaction.