Which two statements are true regarding MySQL security? (Choose two.)

Question

Options

• AThe mysql user needs to have sudo privileges.
• BThe mysql process owner should own all files and directories to which the server writes.
• CThe root or administrator users should own all files and directories to which the server writes.
• DThe mysql process should be run as root or administrator.
• EThe mysql process should not be run as root or administrator.

• B
  8% (2)
• C
  88% (22)
• D
  4% (1)

Explanation

There's an issue with this question worth flagging: the stated correct answer C is actually incorrect from a MySQL security standpoint, and the question asks to "choose two." The real correct answers are B and E.

Why B and E are correct: The MySQL process should run as a dedicated, unprivileged OS user (typically mysql) - never as root or administrator (making E true). Because that process user needs write access to data directories and log files, that same user should own those files (making B true). This enforces least-privilege: the process can only touch what it owns.

Why the distractors are wrong:

• A - The mysql OS user requires no sudo privileges; granting them would dangerously expand its attack surface.
• C - Root/administrator owning MySQL's files is a misconfiguration; if MySQL were compromised, an attacker would then have root-owned file access.
• D - Running MySQL as root means any exploit in the MySQL process would immediately have full system access - a catastrophic security failure.

Memory tip: Think "least privilege, least surprise." The user that runs the process should own the files it writes - and that user should be a low-privilege service account, never root. If you see any answer suggesting root ownership or root execution of a database service, mark it wrong.

Note for the exam: If this question appears with "Correct Answer: C," the answer key likely contains a typo. The authoritative MySQL documentation confirms B + E as the correct pair.

No community discussion yet for this question.