Mark works as a Database Administrator for DataOneWorld Inc. Management instructs him to
provide an additional security layer to the database to prevent unauthorized viewing of data with
the help of an algorithm called cipher. Which of the following will help him to accomplish the task?

A.
Native auditing

B.
Authentication

C.
Encryption

D.
Abstraction

Explanation:
Encryption provides an additional security layer, protecting the data from unauthorized viewing with
the help of an algorithm called cipher. Even if access to the database is obtained, it will not be easy
to decipher encrypted data into a readable form.
Answer B is incorrect. Authentication is the process of verifying the identity of a user or software
connecting to a database. During the process of authentication, the user must submit sufficient
information validated either by the database itself, or by the operating system within which the
database is installed.
Answer D is incorrect. Abstraction is a method of coding that enables a user to focus on the coding
rather than the syntax for a specific database API. A user can use generic methods to access a
database. In order to perform database abstraction, a user requires additional code or libraries. The
benefit of database abstraction is that it provides a uniform interface for database access.

Answer A is incorrect. Native auditing is the process of extracting trails on a regular basis so that
they can be transferred to a designated security system where the database administrators do not
have access. This ensures a certain level of segregation of duties and provides evidence that the
native audit trails were not modified by authenticated administrators.