PrepAway - Latest Free Exam Questions & Answers

which of the following?

SQL commands do not include which of the following?

PrepAway - Latest Free Exam Questions & Answers

A.
Select, Update

B.
Grant, Revoke

C.
Delete, Insert

D.
Add, Replace

Explanation:
“SQL commands include Select, Update, Delete, Grant, and Revoke.” Pg. 62 Krutz:
The CISSP Prep Guide: Gold Edition
“Developed by IBM, SQL is a standard data manipulation and relational database definition
language. The SQL Data Definition Language creates and deletes views and relations (tables).
SQL commands include Select, Update, Delete, Insert, Grant, and Revoke. The latter two
commands are used in access control to grant and revoke privileges to resources. Usually, the
owner of an object can withhold or transfer GRANT privileges to an object to another subject. If the
owner intentionally does not transfer the GRANT privileges, however, which are relative to an
object to the individual A, A cannot pass on the GRANT privileges to another subject. In some
instances, however, this security control can be circumvented. For example, if A copies the object,
A essentially becomes the owner of that object and thus can transfer the GRANT privileges to
another user, such as user B.
SQL security issues include the granularity of authorization and the number of different ways you
can execute the same query.
Pg. 63 Krutz: The CISSP Prep Guide: Gold Edition.


Leave a Reply