Authentication and authorization mechanisms MCQs in DBMS

1. What is the primary purpose of authentication in a DBMS?

(A) To encrypt data stored in the database

(B) To verify the identity of users trying to access the database

(C) To manage and assign roles to users

(D) To track and record user activities

2. Which authentication mechanism uses a combination of something the user knows (password) and something the user has (token or smart card)?

(A) Single-factor authentication

(B) Two-factor authentication

(C) Multi-factor authentication

(D) Biometric authentication

3. In the context of database security, what is an authorization mechanism used for?

(A) To verify user identity

(B) To grant or restrict access to database resources based on user roles and permissions

(C) To encrypt data in transit

(D) To track database performance

4. Which of the following is an example of an access control list (ACL) in a DBMS?

(A) A list of users and their associated passwords

(B) A list of database tables and their indexes

(C) A list of permissions and roles assigned to each user

(D) A list of encrypted data keys

5. What does Role-Based Access Control (RBAC) primarily manage?

(A) Permissions based on user roles

(B) User authentication mechanisms

(C) Data encryption standards

(D) Database query performance

6. Which mechanism ensures that only authorized users can perform specific operations on a database object?

(A) Authentication

(B) Authorization

(C) Encryption

(D) Backup and recovery

7. What is the purpose of a “privilege” in a database system?

(A) To define a user’s identity

(B) To specify a user’s permissions for accessing or modifying data

(C) To encrypt sensitive data

(D) To maintain database schema

8. Which type of access control allows users to manage their own permissions for accessing database resources?

(A) Mandatory Access Control (MAC)

(B) Discretionary Access Control (DAC)

(C) Role-Based Access Control (RBAC)

(D) Attribute-Based Access Control (ABAC)

9. What is the main advantage of using Multi-Factor Authentication (MFA) over Single-Factor Authentication (SFA)?

(A) MFA simplifies the authentication process

(B) MFA improves security by requiring multiple forms of verification

(C) MFA reduces the number of passwords required

(D) MFA ensures faster database access

10. Which access control model enforces access restrictions based on user roles and their associated permissions?

(A) Mandatory Access Control (MAC)

(B) Role-Based Access Control (RBAC)

(C) Discretionary Access Control (DAC)

(D) Attribute-Based Access Control (ABAC)

11. In which authentication method is the user’s fingerprint or retina scan used for verification?

(A) Biometric authentication

(B) Single-factor authentication

(C) Multi-factor authentication

(D) Two-factor authentication

12. Which of the following is NOT typically a part of an authorization mechanism in a DBMS?

(A) Access control lists (ACLs)

(B) Role assignments

(C) User passwords

(D) Privilege grants

13. What is the main function of an audit trail in the context of database security?

(A) To prevent unauthorized access

(B) To track and log user activities and changes to data

(C) To manage user roles and permissions

(D) To encrypt data for secure storage

14. In which scenario would a database system use mandatory access control (MAC)?

(A) When users need to manage their own permissions

(B) When strict access controls are enforced based on security labels

(C) When permissions are assigned dynamically based on user roles

(D) When access control decisions are based on user attributes

15. Which type of access control is most appropriate for a system requiring strict and predefined access levels for all users?

(A) Discretionary Access Control (DAC)

(B) Role-Based Access Control (RBAC)

(C) Mandatory Access Control (MAC)

(D) Attribute-Based Access Control (ABAC)