ISC Exam Questions

Role-based access control to protect confidentiality of data in databases can be achieved by which o

Role-based access control to protect confidentiality of data in databases can be achieved by which of the following?

A.
Views

B.
Encryption

C.
Hashing

D.
Masking

Explanation:
A: A view is a feature that allows for virtual tables in a database; these virtual tables are created from one or more real tables in the database. For example, a view can be set up for each user (or group of users) on the system so that the user can then only view those virtual tables (or views). Encryption, hashing, and masking can all provide confi dentiality as well, but for databases, views based access control which is a content dependent access control mechanism is the best answer. Page 236.