MENU
Refer to the exhibit.
Two types of clients are accessing the front ends and the core database that manages transactions, access control, and atomicity. What is the threat model for the SQL database?
Suggested Answer: A
Get Premium 350-201 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
36 comments · newest first
LA
Lashunda
11 months ago
Transferring data to an external server is also a possibility!
TI
Tiera
11 months ago
DoS attacks are a real concern too, though.
LY
Lynelle
11 months ago
Wait, can they really modify access logs? Sounds sketchy.
KE
Kenneth
11 months ago
Totally agree, that's a major risk!
PE
Pearly
12 months ago
An attacker can read or change data.
VE
Verlene
12 months ago
Modifying access logs sounds risky, but I can't recall if that's a common threat model. Maybe option D is less likely?
RO
Ronald
1 year ago
I practiced a similar question where data exfiltration was a concern, so option C could also be a possibility.
VA
Val
1 year ago
I'm not entirely sure, but I think a DoS attack could impact availability, so option A might be relevant too.
LO
Lore
1 year ago
I remember we discussed how SQL databases can be vulnerable to data manipulation, so option B seems likely.
TH
Thaddeus
1 year ago
I'm feeling pretty confident about this one. Based on the information provided, I believe the correct answer is option B - an attacker can read or change the data.
WH
Whitney
1 year ago
I think the best approach here is to consider the different ways an attacker could potentially compromise the database, like unauthorized access, data manipulation, or denial of service attacks.
FR
Francis
1 year ago
I'm a bit confused by the wording of the question. Can the attacker do multiple things, or is it just one specific threat we need to identify?
LA
Lavelle
1 year ago
Okay, let's see here. The key seems to be identifying the potential threats to the SQL database given the two types of clients accessing the system.
EL
Elenor
1 year ago
Hmm, this looks like a tricky one. I'll need to carefully analyze the threat model based on the information provided in the question.
GI
Gilberto
1 year ago
I seem to recall discussing something like this during the review, and I feel like the term “bid solicitation†came up more than once.
EL
Elvis
2 years ago
Transferring data to an external server? That's a sneaky one. Gotta watch out for that too.
CH
Chaya
2 years ago
Hah, I bet the attacker is going to try and modify the access logs to cover their tracks. Classic move!
AL
Alita
2 years ago
C) An attacker can transfer data to an external server.
RO
Robt
2 years ago
B) An attacker can read or change data.
BE
Bernadine
2 years ago
A) An attacker can initiate a DoS attack.
MA
Malika
2 years ago
I'm not so sure. What about the possibility of a DoS attack? That could be just as damaging to the system's availability.
WE
Wenona
2 years ago
We should consider both data manipulation and DoS attacks in the threat model.
JE
Jerry
2 years ago
True, a DoS attack could definitely impact the system's availability.
GA
Gail
2 years ago
But what about the risk of a DoS attack? That could also be a major threat.
AL
Alline
2 years ago
I think the threat model includes the possibility of an attacker reading or changing data.
EL
Eleni
2 years ago
I believe option A) An attacker can initiate a DoS attack is also a valid threat to consider.
IS
Isaac
2 years ago
I agree, B is the correct answer. Protecting the integrity and confidentiality of the data is crucial in this scenario.
LE
Leatha
2 years ago
Absolutely, protecting our data should be our main focus.
LU
Luther
2 years ago
Agreed, we should implement strong authentication measures to prevent data breaches.
MA
Marva
2 years ago
We need to make sure our database is secure from unauthorized access.
JO
Joanna
2 years ago
I think B is the correct answer too. Data security is a top priority.
SU
Sue
2 years ago
The threat model for the SQL database is definitely B) An attacker can read or change data. That's the most concerning vulnerability here.
LU
Lucina
2 years ago
We need to ensure proper security measures are in place to prevent unauthorized access.
EV
Evelynn
2 years ago
I agree, data manipulation by an attacker is a serious threat.
TA
Tashia
2 years ago
I think the threat model for the SQL database is B) An attacker can read or change data.
EM
Emmanuel
2 years ago
I agree with Tashia, unauthorized access to data is a major concern in this scenario.