A university database stores student records, exam results, and staff information. Only authorized users should be able to modify sensitive data. Which of the following controls help secure the database system? i) Assigning user roles and privilegesii) Using authentication mechanismsiii) Performing regular backupsiv) Allowing unrestricted access

Question

BlackTom AI · Accepted Answer

Assigning user roles and privileges (role-based access), strong authentication, and regular backups are standard safeguards for protecting a university database.

1. Relevant knowledge points and concepts
- Access control/authorization: Role-Based Access Control (RBAC) restricts who can read, write, or modify particular data based on user roles (students, instructors, admins).  
- Authentication: Verifying identity (passwords, MFA, SSO) ensures only legitimate users gain access.  
- Backups (availability and recovery): Regular backups protect against data loss, corruption, or ransomware, enabling restoration of sensitive records.  
- Unrestricted access: This is the opposite of security; it removes protections and allows unauthorized modification.

2. Step-by-step reasoning
- The requirement is "Only authorized users should be able to modify sensitive data." That implies mechanisms that (a) verify identity (authentication) and (b) limit actions by identity (authorization/roles and privileges).  
- Regular backups do not directly restrict access, but they are a complementary control that protects data integrity and availability if misuse, accidental changes, or attacks occur.  
- Allowing unrestricted access would violate the requirement because it does not prevent unauthorized modifications.

3. Calculations/intermediate steps
- No numeric calculations are required. Logical deductions: Authentication (yes) + Authorization (yes) = prevents unauthorized modification. Backups (yes) = supports recovery. Unrestricted access (no) = insecure.

4. Why the correct answer is correct
- i (roles/privileges) enforces authorization rules. ii (authentication) ensures users are who they claim to be. iii (backups) preserves data integrity and supports recovery after incidents. Together they form practical, layered security for the database.

5. Why other options are incorrect
- b (iii and iv): Includes backups (good) but also unrestricted access (bad) and omits authentication/authorization—insufficient.  
- c (ii and iv): Authentication paired with unrestricted access is contradictory and still lacks authorization and backups.  
- d (i and iv): Roles with unrestricted access is self-contradictory and lacks authentication and backups.

6. Conclusion
- Therefore the best choice is a. i, ii, and iii, which matches the provided correct answer.

类似问题

When all data are stored in a central place, which of the following is not essential to ensure data are protected?

Database security is the mechanisms that protect the database against

Why is database security important for industries regulated by laws like PDPA?

What does Database Security primarily aim to protect?

In the context of database security, what is an inference attack?

When evaluating a new project, firms should include in the projected cash flows all of the following EXCEPT:

更多留学生实用工具

智能学习助手

风格化写作助手

论文查重助手

文献引用助手

课堂转译助手

课堂笔记助手

Quiz搜索助手

学校历年真题

智能刷题助手

智能匹配练习

希望你的学习变得更简单