A database administrator has been asked to assign a user the ability to view a data set. Which of the following practices best describes this request?
Correct Answer: A
The practice that best describes this request is access control. Access control is a process that regulates who can access what data in a system based on predefined rules or policies. Access control helps protect data from unauthorized or inappropriate access or modification by granting or denying permissions or privileges to users or groups based on their roles or identities. By applying access control, the database administrator can assign a user the ability to view a data set without allowing them to change or delete it. The other options are either different practices or not related to this request. For example, security audit is a process that evaluates the security level of a system by identifying vulnerabilities or risks; database audit is a process that monitors and records the activities or events that occur on a database; password policy implementation is a process that defines and enforces rules or standards for creating and managing passwords. Reference: CompTIA DataSys+ Course Outline, Domain 4.0 Data and Database Security, Objective 4.2 Given a scenario, implement security controls for databases.
Question 27
Which of the following describes a scenario in which a database administrator would use a relational database rather than a non-relational database?
Correct Answer: A
A scenario in which a database administrator would use a relational database rather than a non-relational database is when an organization wants to maintain consistency among the data in the database. A relational database is a type of database that organizes data into tables with predefined columns and rows, and enforces rules and constraints to ensure data integrity and accuracy. A relational database also supports transactions, which are sets of operations that must be executed as a whole or not at all, to prevent data corruption or inconsistency. The other options are either not exclusive to relational databases or not relevant to the choice of database type. For example, data encryption can be applied to both relational and non-relational databases, processing complex data sets may require specialized tools or techniques that are not dependent on the database type, and storing a large number of videos, photos, and documents may be better suited for a non-relational database that can handle unstructured or semi-structured data. Reference: CompTIA DataSys+ Course Outline, Domain 1.0 Database Fundamentals, Objective 1.1 Given a scenario, identify and apply database structure types.
Question 28
An automated script is using common passwords to gain access to a remote system. Which of the following attacks is being performed?
Correct Answer: B
The attack that is being performed is brute-force. A brute-force attack is a type of attack that tries to guess a password or a key by systematically trying all possible combinations of characters or values until the correct one is found. A brute-force attack can use common passwords, such as "123456", "password", or "qwerty", as well as dictionaries, word lists, or patterns to speed up the process. A brute-force attack can target a remote system, such as a web server, an email account, or a network device, and gain unauthorized access to its data or resources. The other options are either different types of attacks or not related to password guessing. For example, a DoS, or Denial-of-Service, attack is a type of attack that floods a system with requests or traffic to overwhelm its capacity and prevent legitimate users from accessing it; an SQL injection attack is a type of attack that inserts malicious SQL statements into an input field or parameter of a web application to manipulate or compromise the underlying database; a phishing attack is a type of attack that sends fraudulent emails or messages that appear to come from a trusted source to trick users into revealing their personal or financial information. Reference: CompTIA DataSys+ Course Outline, Domain 4.0 Data and Database Security, Objective 4.4 Given a scenario, identify common types of attacks against databases.
Question 29
A DBA is reviewing the following logs to determine the current data backup plan for a primary data server: Which of the following best describes this backup plan?
Correct Answer: D
The backup plan that best describes the logs is weekly full, daily incremental. This means that a full backup of the entire database is performed once a week, and then only the changes made since the last backup are backed up every day. This can be inferred from the logs by looking at the size and duration of the backups. The full backups are larger and take longer than the incremental backups, and they occur every seven days. The other backup plans do not match the pattern of the logs. Reference: CompTIA DataSys+ Course Outline, Domain 5.0 Business Continuity, Objective 5.2 Given a scenario, implement backup and restoration of database management systems.
