SSCP · Question #321
Which of the following is used in database information security to hide information?
The correct answer is B. Polyinstantiation. Polyinstantiation is a database security technique that allows multiple versions of the same record to exist at different classification levels, so users with lower clearance see sanitized or false data rather than the actual sensitive information - effectively hiding it in…
Question
Which of the following is used in database information security to hide information?
Options
- AInheritance
- BPolyinstantiation
- CPolymorphism
- DDelegation
How the community answered
(29 responses)- A3% (1)
- B93% (27)
- D3% (1)
Explanation
Polyinstantiation is a database security technique that allows multiple versions of the same record to exist at different classification levels, so users with lower clearance see sanitized or false data rather than the actual sensitive information - effectively hiding it in plain sight.
Why the distractors are wrong:
- Inheritance (A) is an OOP/database concept where a child class/table acquires properties from a parent - it's about code reuse, not data hiding.
- Polymorphism (C) allows objects to take multiple forms based on context - another OOP concept with no direct role in access-based data concealment.
- Delegation (D) refers to passing responsibility to another object or entity - a design pattern, not a security mechanism for hiding data.
Memory tip: Think of polyinstantiation as "poly" (many) + "instance" - many instances of the same row exist, each tailored to a different security level. A low-clearance user sees a decoy row; the real data is hidden in the higher-clearance instance.
Topics
Community Discussion
No community discussion yet for this question.