Fundamentals of InfoSecintermediate
Match each database command or security concept with its correct description.
Answer
INSERT - Adds new records to a database table, UPDATE - Modifies existing records in a database table, Prepared statement - Separates executable query logic from user-supplied parameter values, Sweeping privileges - Grants broad permissions beyond what is necessary, increasing security risk
Explanation
### The pairs
| Item | Matches | Why |
|---|---|---|
| INSERT | Adds new data to a table | The command creates an addition to the table's data. |
| UPDATE | Modifies existing data in a table | The command changes data already stored in the table. |
| Prepared statement | Separates a command's structure from parameter values | This separation prevents supplied values from being interpreted as SQL syntax. |
| Sweeping privileges | Granting broad permissions that should be avoided | Broad permissions give an application more authority than it may need. |
### The concept
Database commands and permissions have distinct security consequences. An attacker who can inject commands may add or alter data; excessive privileges can increase the impact of such a compromise.
### Terms
- **Table**: A structured collection of database records.
- **Prepared statement**: A command prepared separately from its input values.
- **Privilege**: Permission to use a database function or resource.
### Remember
Know what each command changes, and restrict what the application is allowed to do.
Related Questions
- Explain why computer security is described as a process rather than a product. Include the roles of technology, people, and environment.(intermediate)
- Select ALL items the review identifies as possible security risks or losses.(intermediate)
- Arrange these broad security activities in a sensible cycle, beginning with identifying what needs protection.(intermediate)
- A security product can replace the continuing work of managing people, technology, and the operating environment.(intermediate)
- Which statement best captures the course review’s view of computer security?(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free