Sensitive Data Scenarios

1. What is the primary purpose of using TLS in data in transit?

To store data securely To encrypt data stored on disks To protect data as it moves between systems To anonymize user identities

2. Why is Transparent Data Encryption (TDE) not sufficient for protecting sensitive data against a compromised application?

It only protects against stolen disks It automatically encrypts all application connections It secures the database from SQL injection attacks It is complex to configure

3. What is a major risk when logging sensitive information, such as candidate data, during development?

Sensitive data is only logged temporarily Logs may be exported to less secure locations Logged data aids in troubleshooting development issues Everyone has the same access to log files

4. Which of the following practices helps enforce the principle of least privilege in database access?

Assigning db_owner permissions to all app users Using resource-based authorization for reading records Allowing unrestricted access during development Automatically granting sysadmin rights to developers

Continue: Secrets and Supply Chain → Review this lesson Retake quiz