A database account should have only the permissions required for its task. This is the principle of _____.
Answer
least privilege
Explanation
### Why this is right
Least privilege means granting an account only the permissions needed to perform its assigned work. If an attacker abuses the application account, those restrictions can reduce the actions available to them.
### The concept
A web application often connects to a database using an account. If that account has broad administrative authority, a compromised application may expose more data or functions than necessary. Restricting privileges does not prevent every injection flaw, but it can limit consequences.
### Terms
- **Least privilege**: limiting permissions to the minimum needed for a task.
- **Database account**: an identity used to connect to a database and perform permitted operations.
### Remember
Give application accounts only the authority their normal work requires.
Related Questions
- Regular security audits and penetration tests can help identify and fix application weaknesses before attackers exploit them.(basic)
- In blind Structured Query Language (SQL) injection, the attacker cannot directly see the result and instead infers information from application behavior.(basic)
- A Web Application Firewall (WAF) should be treated as a replacement for secure query construction.(basic)
- A database-backed application needs to stop showing detailed database errors to ordinary users while retaining information for investigation. Which approach best matches the lesson?(intermediate)
- What is the main reason to avoid constructing database statements dynamically from unchecked user input?(basic)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free