nerdexam
(ISC)2

SSCP · Question #213

Which of the following is commonly used for retrofitting multilevel security to a database management system?

The correct answer is A. trusted front-end.. A trusted front-end is a security component interposed between users and an existing, unmodified DBMS. Rather than rewriting the database engine (which would be expensive and risky), a trusted front-end enforces multilevel security policy - such as mandatory access controls and l

Submitted by hans_de· Apr 18, 2026Systems and Application Security

Question

Which of the following is commonly used for retrofitting multilevel security to a database management system?

Options

  • Atrusted front-end.
  • Btrusted back-end.
  • Ccontroller.
  • Dkernel.

How the community answered

(63 responses)
  • A
    86% (54)
  • B
    5% (3)
  • C
    8% (5)
  • D
    2% (1)

Explanation

A trusted front-end is a security component interposed between users and an existing, unmodified DBMS. Rather than rewriting the database engine (which would be expensive and risky), a trusted front-end enforces multilevel security policy - such as mandatory access controls and label enforcement - by mediating all queries and results before they reach or leave the underlying DBMS. This retrofit approach is the standard solution when you cannot modify the core database product. A trusted back-end (B) is not a recognized standard solution for this purpose. A controller (C) or kernel (D) are generic OS concepts, not DBMS-specific security retrofit mechanisms.

Topics

#Database Security#Multilevel Security (MLS)#Trusted Front-End#Security Architecture

Community Discussion

No community discussion yet for this question.

Full SSCP Practice