Exam 6: SQL Server Security

Which of the following is a method to secure client/server connections that uses certificates for identification?

Which of the following is another term for the layered security model?

Security principals can be either users or groups.

Which predefined server-level role allows a user to create or alter any database?

Encryption does not prevent data loss, but it can lessen the impact of data loss.

Use of a third-party product can improve the ________ management function that encompasses their generation, storage, distribution and retrieval.

Which encryption algorithm is a block cipher that uses a 128-bit block cipher with varying key sizes?

The default role assigned to every login is the __________ role.

IPSec uses certificates for identity verification.

Which of the following is NOT an action against a database object that requires a permission?

Which of the following is true about database permissions?

Which term is best described as a way to group together users for the purposes of managing database permissions?

Which type of encryption uses public and private keys?

Which of the following is a reason that Windows authentication is considered more secure than combining Windows and SQL Server authentication.

Which of the following is NOT a type of security principal that may request access to a SQL server instance?

List and describe three fixed roles that are associated with performing administrative functions on the server.

AES is a block cipher that translates fixed-size blocks of unencrypted data into corresponding fixed-sized blocks of encrypted data.

Which default account is enabled when SQL Server authentication is enabled using mixed mode?

SQL Server can generate a self-signed ______________ to encrypt data.

What happens when a users requests access to a SQL Server using Windows authentication?