Question 1

Passwords should appear on the terminal screen when they are typed in.

Accepted Answer

Passwords should not be displayed on the terminal screen for security purposes as it can be easily visible to anyone looking over the shoulder. It is recommended to use password masking techniques like replacing characters with asterisks or dots while typing passwords.

Question 2

All of the following are true about deadlock, except ____.
A) deadlock can be detected by a resource usage matrix
B) deadlock can be detected with a timeout
C) the use of locks to prevent the lost update problem can cause deadlock
D) deadlock prevention is difficult
E) locks should never be used because of the potential for deadlock

Accepted Answer

The statement "locks should never be used because of the potential for deadlock" is incorrect as locks are an important tool for ensuring data integrity and preventing the lost update problem. The other statements are true.

Question 3

With the combination of the logical view and the SQL GRANT command, users either individually or in groups can be restricted to accessing only certain database tables or only certain data within a database table.

Accepted Answer

The logical view and the SQL GRANT command can be used to restrict user access to certain database tables or data within them.

Question 4

A computer virus is a malicious piece of software that has the goal of damaging hardware as a means of breaching data security.

Accepted Answer

A computer virus is a malicious piece of software that has the goal of breaching data security, but it does not necessarily have the goal of damaging hardware.

Question 5

Data that has been encrypted has to be decrypted to be used again.

Accepted Answer

Encrypted data is essentially scrambled and cannot be understood without first being decrypted using the proper decryption key or algorithm.

Question 6

The lost update problem can occur when ____.
A) two users are trying to retrieve the same data simultaneously
B) one user is trying to retrieve data and another user is trying to update the same data simultaneously
C) two users are trying to update the same data simultaneously
D) All of the above.
E) None of the above.

Accepted Answer

The lost update problem occurs when two users are trying to update the same data simultaneously, leading to one user's changes being overwritten by the other user's changes. Option A is incorrect because retrieving data simultaneously does not lead to a lost update. Option B is incorrect because if one user is only retrieving data and not updating it, there is no chance of a lost update. Option D is incorrect because it includes options A and B, which are not relevant to the lost update problem. Option E is incorrect because there is a valid choice for the answer.

Question 7

All of the following are disaster recovery tools or techniques, except ____.
A) totally mirrored systems
B) hot sites
C) cold sites
D) multiple versions
E) reciprocal agreements

Accepted Answer

Multiple versions are not a disaster recovery tool or technique. The other options listed (totally mirrored systems, hot sites, cold sites, and reciprocal agreements) are all commonly used methods for disaster recovery.

Question 8

The SQL GRANT command is used both to control access to the database and to retrieve data.

Accepted Answer

The SQL GRANT command is used to control access to the database by providing privileges, but it is not used to retrieve data. Retrieving data is typically done using the SELECT statement.

Question 9

A computer virus attack is the computer version of the old concept of "wiretapping."

Accepted Answer

A computer virus attack involves malicious software designed to harm, disrupt, or gain unauthorized access to computer systems, whereas wiretapping is the act of secretly listening to or recording someone's telephone conversation, typically for surveillance purposes.

Question 10

Stealing disks is a method of breaching computer security.

Accepted Answer

Stealing disks, such as hard drives or USB drives, can provide access to sensitive data and is considered a security breach.

Question 11

Unauthorized data access and unauthorized data modification are two types of data security breaches.

Accepted Answer

This is true. Unauthorized data access refers to someone accessing sensitive data without authorization or permission. Unauthorized data modification refers to someone altering or changing sensitive data without authorization or permission. Both are considered data security breaches.

Question 12

Controlled access to the computer system is a method of breaching security.

Accepted Answer

Controlled access, where users are given specific access levels and permissions, is actually a method of enforcing security, not breaching it. Uncontrolled or unauthorized access, on the other hand, is a method of breaching security.

Question 13

Passwords should not be so difficult to remember that the person herself has to write them down, which is security exposure in itself because someone else could potentially see it.

Accepted Answer

Passwords should be strong but also memorable enough that the user doesn't have to write them down, minimising the risk of the password being stolen or compromised.

Question 14

Damaged hardware can result in unusable or unavailable data.

Accepted Answer

Damaged hardware can cause issues in accessing and retrieving data, which may make it unusable or unavailable.

Question 15

In public key encryption, one key is used to encrypt the data and another key is used to decrypt the data.

Accepted Answer

Public key encryption uses a public key to encrypt the data and a private key (not another public key) to decrypt the data.

Question 16

Biometric systems limit personnel access to computer rooms based on something they know, such as a secret code to be punched in.

Accepted Answer

Biometric systems limit personnel access based on a physical characteristic, such as fingerprints, facial recognition, or retina scans, rather than something they know like a code or password.

Question 17

In public key encryption, the private key is used for encrypting the data and the public key is used for decrypting it.

Accepted Answer

In public key encryption, the public key is used for encrypting the data and the private key is used for decrypting it.

Question 18

The only use for data encryption is when data is transmitted on a telecommunications line.

Accepted Answer

Encryption can also be used to protect data at rest (stored on devices or servers), and to enforce access control.

Question 19

Using an option of the SQL GRANT command, this person with access to data can in turn grant other people access to the same data.

Accepted Answer

The option is WITH GRANT OPTION, which allows the grantee to further grant access to the same data.

Question 20

Recommended places to locate a mainframe computer or a cluster of servers include a building's basement and ground floor.

Accepted Answer

Mainframe computers or server clusters require environments with controlled temperatures, low risk of flooding, and secure access, making basements and ground floors less ideal due to higher flood risks and potential security issues. Upper floors or specially designed, secure locations are often preferred.

Quiz 11: Database Control Issues: Security, Backup and Recovery, Concurrency