Database Management System

SQL injection attacks can be prevented by:
(i) Dynamic SQL
(ii) Input trimming
(iii) Prepared Statements
(iv) Using DELETE statements

Which access control model assigns permissions to roles instead of individual users?
(i) DAC
(ii) MAC
(iii) RBAC
(iv) Firewall

____ is an attack which forces an end user to execute unwanted actions on a Web application in which he/she is currently authenticated.
(i) Two-factor authentication
(ii) Cross-site request forgery
(iii) Cross-site scripting
(iv) Cross-site scoring scripting

____ allows a system administrator to associate a function with a relation; the function returns a predicate that must be added to any query that uses the relation.
(i) OpenID
(ii) Single-site System
(iii) Security Assertion Markup Language (SAML)
(iv) Virtual Private Database (VPD)

What is the purpose of having separate categories for index authorization and resource authorization?

Explain authentication, authorization, and the role of encryption in DBMS security.

What is DAC, MAC, and RBAC models in databases? Compare and contrast these models based on their policy mechanisms, user flexibility, and real-world applicability. Also explain which model is most suited for large enterprise systems and why.

Write short notes on the following:
(a) RBAC model

Write short notes on: SQL Injection

Explain the concepts of Authentication, Authorization, and Access Control in database systems. How do these mechanisms work together to ensure database security? Support your answer with real-world examples and discuss how they are implemented in modern DBMS platforms.

Write a short note on:

SQL injection attacks