SSCP · Question #213
Which of the following is commonly used for retrofitting multilevel security to a database management system?
The correct answer is A. trusted front-end.. A trusted front-end is a security component interposed between users and an existing, unmodified DBMS. Rather than rewriting the database engine (which would be expensive and risky), a trusted front-end enforces multilevel security policy - such as mandatory access controls and l
Question
Options
- Atrusted front-end.
- Btrusted back-end.
- Ccontroller.
- Dkernel.
How the community answered
(63 responses)- A86% (54)
- B5% (3)
- C8% (5)
- D2% (1)
Explanation
A trusted front-end is a security component interposed between users and an existing, unmodified DBMS. Rather than rewriting the database engine (which would be expensive and risky), a trusted front-end enforces multilevel security policy - such as mandatory access controls and label enforcement - by mediating all queries and results before they reach or leave the underlying DBMS. This retrofit approach is the standard solution when you cannot modify the core database product. A trusted back-end (B) is not a recognized standard solution for this purpose. A controller (C) or kernel (D) are generic OS concepts, not DBMS-specific security retrofit mechanisms.
Topics
Community Discussion
No community discussion yet for this question.