iSACA Cybersecurity Fundamentals Certification Practice Exam

What is one of the essential controls for database security?

1. Regular software updates

2. Authentication and authorization of access

3. Physical security measures

4. User training on data use

The correct answer is: Authentication and authorization of access

Authentication and authorization of access are critical components of database security because they ensure that only authorized users can access sensitive data. By implementing strong authentication methods, such as multi-factor authentication, organizations can validate the identities of users attempting to gain access to the database. Authorization, on the other hand, determines the level of access each user has, helping to enforce the principle of least privilege. This reduces the risk of unauthorized access to sensitive information, which could lead to data breaches or malicious activities. While regular software updates, physical security measures, and user training are all important for a comprehensive security strategy, they do not directly address the fundamental aspect of who can access the database and what actions they can perform. Therefore, focusing on authentication and authorization is crucial to securing databases and protecting sensitive information from unauthorized access.