INTRODUCTION – Introduction to Databases 

TYPES OF DATA

1. True or False: If all of your organization’s data is centralized in a small number of data centers, than focusing security on perimiter defense is adequate to assure your data is safe.

2. Which two (2) of the following data source types are considered structured data?

3. Data that has not been organized into a specialized repository, but does have associated information, such as metadata that makes it more amenable to processing than raw data, is an example of which data model type?

4. How are the tables in a relational database linked together?

SECURING DATABASES

1. In the video Securing the Crown Jewels, the “Identification and Baseline” phase contains which three (3) of the following items?

2. In the video Leveraging Security Industry Best Practices, which US Government agency is a co-publisher of the Database Security Requirements Guide (SRG)?

3. For added security, a firewall is often placed between which of these?

4. True or False: In a vulnerability assessment test, a new commercial database installed on a new instance of a major operating system should pass 80-90% of the vulnerability tests out-of-the-box unless there is a major flaw or breach.

5. Which of these hosting environments requires the enterprise to manage the largest number of different data sources?

6. While data security is an ongoing process, what is the correct order to consider these steps?

A DATA PROTECTION SOLUTION EXAMPLE, IBM SECURITY GUARDIUM USE CASES

1. In setting up policy rules for data monitoring, what is the purpose of “exclude” rules?

2. True or False: Data monitoring products such as IBM Guardium can send access alerts to syslog for manual intervention by a security analyst but must be connected to addition applications if automated interventions are desired.

3. To created auditable reports of data access using the IBM Guardium product, the administrator would do which of the following?

4. True or False: The IBM Guardium monitoring applications is capable of monitoring activities in non-relational databases such as Hadoop, Cognos, and Spark.

5. At a minimum, which 3 entities should be captured in any event log?

6. True of False: In the IBM Guardium data monitoring tool, the number of failed login attempts that would trigger an alert are always counted since the last successful login.

7. Which activity should be considered suspicious and might indicate inappropriate activity is being attempted?

8. Which two (2) activities should be considered suspicious and warrant further investigation?

INTRODUCTION TO DATABASES

1. Distributed databases, data warehouses, big data, and File shares are all classified as what?

2. Hadoop, MongoDB, and BigTable are all examples of which data source type?

3. Data that has been organized into a formatted repository, typically a database, so its elements can be made addressable, is an example of which data model type?

4. Which of the following is the primary difference between a flat file database and a relational database?

5. In the video Leveraging Security Industry Best Practices, where would you turn to look for help on establishing security benchmarks for your database?

6. Most of the time, how do users access data?

7. True or False: In a vulnerability assessment test, it is not uncommon to fail more than 50% of the tests before the operating system and database are hardened.

8. What distinguishes structured data from unstructured data? 

9. While data security is an ongoing process, what is the correct order to consider these steps?

10. To automatically terminate a session if an attempt is made to access data in a sensitive table, such as Social Security (SSN) ID numbers, you would set up which type of rule?

11. True or False: Data monitoring products such as IBM Guarduim are fully capable of blocking access to sensitive data based upon access parameters configured in policy rules. 

12. True or False: Data monitoring tools such as IBM Guardium are designed to monitor activities within a database, but external products, such as a privileged identity management (PIM) tool would be required to monitor changes to the data monitoring tool itself, such as the addition of new users or the alteration of existing user accounts.

13. True or False: In the IBM Guardium data monitoring tool, it is possible to create a report that shows not only how many SQL unauthorized access attempts were made by an individual, but also exactly which SQL statements were disallowed.

14. Which activity should be considered suspicious and might indicate inappropriate activity is being attempted?

CONCLUSION – Introduction to Databases