Threat Mitigation DS0-001 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which defense mechanism is most effective in recovering from a ransomware attack on a database?

   • ADisabling the database's firewall
   • BIncreasing the database's cache size
   • CUsing a simple password policy
   • DMaintaining regular, tested backups
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company has experienced several successful phishing attacks that compromised database credentials. The security team wants to implement a control that directly reduces the likelihood of users falling for phishing emails. Which measure is MOST effective?

   • ADisable all external email
   • BIncrease the database connection timeout
   • CImplement database encryption at rest
   • DConduct regular security awareness training
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which security measure is most effective in preventing brute-force attacks on database user accounts?

   • ARemoving audit logging
   • BDisabling password complexity requirements
   • CImplementing account lockout policies
   • DIncreasing the database's connection timeout
   Reveal Solution Discussion Select an answer first
5. 19application · easy

   A database administrator receives an email that appears to be from a cloud database provider, stating that the account will be suspended unless the administrator clicks a link and enters the database password. The email's sender address is not the provider's official domain. Which action should the administrator take?

   • AClick the link and enter the password to prevent account suspension
   • BForward the email to other administrators to see if they received it
   • CReport the email as phishing and do not click the link
   • DReply to the email asking for verification
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   A developer is writing code to accept a customer ID from a web form and retrieve the customer's record. Which coding practice best prevents SQL injection?

   • AStoring the input in a session variable and using it later
   • BConverting the input to uppercase before querying
   • CConcatenating the input directly into the SQL string
   • DValidating that the input is a positive integer before using it in a query
   Reveal Solution Discussion Select an answer first