GCIH · Question #91
Which of the following are countermeasures to prevent unauthorized database access attacks? Each correct answer represents a complete solution. Choose all that apply.
The correct answer is A. Session encryption B. Removing all stored procedures C. Applying strong firewall rules D. Input sanitization. Preventing unauthorized database access requires a layered defense strategy that addresses encryption, attack surface reduction, network filtering, and input validation simultaneously.
Question
Which of the following are countermeasures to prevent unauthorized database access attacks? Each correct answer represents a complete solution. Choose all that apply.
Options
- ASession encryption
- BRemoving all stored procedures
- CApplying strong firewall rules
- DInput sanitization
How the community answered
(22 responses)- A100% (22)
Why each option
Preventing unauthorized database access requires a layered defense strategy that addresses encryption, attack surface reduction, network filtering, and input validation simultaneously.
Session encryption protects data in transit between client and database tier, preventing credential and query interception.
Removing unused stored procedures reduces the attack surface that an attacker could exploit to execute elevated or unintended database operations.
Strong firewall rules restrict which hosts and ports can reach the database server, blocking unauthorized direct connection attempts.
Input sanitization prevents SQL injection by ensuring user-supplied data cannot be interpreted as executable SQL commands.
Concept tested: Layered countermeasures for database access security
Source: https://owasp.org/www-project-top-ten/2017/A1_2017-Injection
Topics
Community Discussion
No community discussion yet for this question.