nerdexam
GIAC

GCIH · Question #91

Which of the following are countermeasures to prevent unauthorized database access attacks? Each correct answer represents a complete solution. Choose all that apply.

The correct answer is A. Session encryption B. Removing all stored procedures C. Applying strong firewall rules D. Input sanitization. Preventing unauthorized database access requires a layered defense strategy that addresses encryption, attack surface reduction, network filtering, and input validation simultaneously.

Web Application Attacks & Post-Exploitation

Question

Which of the following are countermeasures to prevent unauthorized database access attacks? Each correct answer represents a complete solution. Choose all that apply.

Options

  • ASession encryption
  • BRemoving all stored procedures
  • CApplying strong firewall rules
  • DInput sanitization

How the community answered

(22 responses)
  • A
    100% (22)

Why each option

Preventing unauthorized database access requires a layered defense strategy that addresses encryption, attack surface reduction, network filtering, and input validation simultaneously.

ASession encryptionCorrect

Session encryption protects data in transit between client and database tier, preventing credential and query interception.

BRemoving all stored proceduresCorrect

Removing unused stored procedures reduces the attack surface that an attacker could exploit to execute elevated or unintended database operations.

CApplying strong firewall rulesCorrect

Strong firewall rules restrict which hosts and ports can reach the database server, blocking unauthorized direct connection attempts.

DInput sanitizationCorrect

Input sanitization prevents SQL injection by ensuring user-supplied data cannot be interpreted as executable SQL commands.

Concept tested: Layered countermeasures for database access security

Source: https://owasp.org/www-project-top-ten/2017/A1_2017-Injection

Topics

#database security#SQL injection prevention#input sanitization#firewall rules

Community Discussion

No community discussion yet for this question.

Full GCIH Practice