Solved MCQ of Database Management System (DBMS) Set - 3


1. State true or false.
i) Select operator is not a unary operator.
ii) Project operator chooses subset of attributes or columns of a relation.

A) i-True, ii-False

B) i-True, ii-True

C) i-False, ii-True

D) i-False, ii-False


2. …………… database is used as template for all databases created.

A) Master

B) Model

C) Tempdb

D) None of the above


3. One aspect that has to be dealt with by the integrity subsystem is to ensure that only valid values can be assigned to each data items. This is referred to as

A) Data Security

B) Domain access

C) Data Control

D) Domain Integrity


4. ………………….. operator is basically a join followed by a project on the attributes of first relation.

A) Join

B) Semi-Join

C) Full Join

D) Inner Join


5. Which of the following is not a binary operator in relational algebra?

A) Join

B) Semi-Join

C) Assignment

D) Project


6. Centralizing the integrity checking directly under the DBMS ………….. Duplication and ensures the consistency and validity of the database.

A) Increases

B) Skips

C) Does not reduce

D) Reduces


7. Which of the following is/are the DDL statements?

A) Create

B) Drop

C) Alter

D) All of the above


8. In snapshot, …………………. clause tells oracle how long to wait between refreshes.

A) Complete

B) Force

C) Next

D) Refresh


9. ……………… defines rules regarding the values allowed in columns and is the standard mechanism for enforcing database integrity.

A) Column

B) Constraint

C) Index

D) Trigger


10. For like predicate which of the following is true.
i) % matches zero of more characters.
ii) _ matches exactly one character.

A) i-only

B) ii-only

C) Both of them

D) None of them


Answers:

1. C) i-False, ii-True
2. B) Model
3. D) Domain Integrity
4. B) Semi-Join
5. D) Project
6. D) Reduces
7. D) All of the above
8. D) Refresh
9. B) Constraint
10. C) Both of them


Related Posts

For other more Multiple Choice Questions (MCQs): Click Here

Solved MCQ of Database Management System (DBMS) Set - 2


1. The candidate key is that you choose to identify each row uniquely is called ……………..

A) Alternate Key

B) Primary Key

C) Foreign Key

D) None of the above


2. …………….. is used to determine whether of a table contains duplicate rows.

A) Unique predicate

B) Like Predicate

C) Null predicate

D) In predicate


3. To eliminate duplicate rows ……………… is used

A) NODUPLICATE

B) ELIMINATE

C) DISTINCT

D) None of these


4. State true or false

i) A candidate key is a minimal super key.

ii) A candidate key can also refer to as surrogate key.

A) i-true, ii-false

B) i-false, ii-true

C) i-true, ii-true

D) i-false, ii-false


5. DCL stands for

A) Data Control Language

B) Data Console Language

C) Data Console Level

D) Data Control Level


6. …………………… is the process of organizing data into related tables.

A) Normalization

B) Generalization

C) Specialization

D) None of the above


7. A ………………. Does not have a distinguishing attribute if its own and mostly are dependent entities, which are part of some another entity.

A) Weak entity

B) Strong entity

C) Non attributes entity

D) Dependent entity


8. …………….. is the complex search criteria in the where clause.

A) Sub string

B) Drop Table

C) Predict

D) Predicate


9. ………………… is preferred method for enforcing data integrity

A) Constraints

B) Stored Procedure

C) Triggers

D) Cursors


10. The number of tuples in a relation is called its …………. While the number of attributes in a relation is called it’s ………………..

A) Degree, Cardinality

B) Cardinality, Degree

C) Rows, Columns

D) Columns, Rows


11) The language that requires a user to specify the data to be retrieved without specifying exactly how to get it is

A. Procedural DML

B. Non-Procedural DML

C. Procedural DDL

D. Non-Procedural DDL


12) Which two files are used during operation of the DBMS?

A. Query languages and utilities

B. DML and query language

C. Data dictionary and transaction log

D. Data dictionary and query language


13) The database schema is written in

A. HLL

B. DML

C. DDL

D. DCL


14) The way a particular application views the data from the database that the application uses is a

A. module

B. relational model

C. schema

D. sub schema


15) The relational model feature is that there

A. is no need for primary key data

B. is much more data independence than some other database models

C. are explicit relationships among records.

D. are tables with many dimensions


16) Which one of the following statements is false?

A. The data dictionary is normally maintained by the database administrator

B. Data elements in the database can be modified by changing the data dictionary.

C. The data dictionary contains the name and description of each data element.

D. The data dictionary is a tool used exclusively by the database administrator.


17) Which of the following are the properties of entities?

A. Groups

B. Table

C. Attributes

D. Switchboards


18) Which database level is closest to the users?

A. External

B. Internal

C. Physical

D. Conceptual


19) Which are the two ways in which entities can participate in a relationship?

A. Passive and active

B. Total and partial

C. Simple and Complex

D. All of the above


20) ........ data type can store unstructured data

A. RAW

B. CHAR

C. NUMERIC

D. VARCHAR

Answers:


1. B. Primary Key
2. A. Unique predicate
3. C. DISTINCT
4. C. i-true, ii-true
5. A. Data Control Language
6. A. Normalization
7. A. Weak entity
8. D. Predicate
9. A. Constraints
10. B. Cardinality, Degree
11. B. Non-Procedural DML
12.C. Data dictionary and transaction log
13. C. DDL
14. D. sub schema
15. B. is much more data independence than some other database models
16. B. Data elements in the database can be modified by changing the data dictionary.
17. C. Attributes
18. A. External
19. B. Total and partial
20. A. RAW


Related Posts

For other more Multiple Choice Questions (MCQs): Click Here

Solved MCQ of Database Management System (DBMS) Set - 1


1. DBMS is a collection of ………….. that enables user to create and maintain a database.

A) Keys

B) Translators

C) Program

D) Language Activity


2. In a relational schema, each tuple is divided into fields called

A) Relations

B) Domains

C) Queries

D) All of the above


3. In an ER model, ……………. is described in the database by storing its data.

A) Entity

B) Attribute

C) Relationship

D) Notation


4. DFD stands for

A) Data Flow Document

B) Data File Diagram

C) Data Flow Diagram

D) Non of the above


5. A top-to-bottom relationship among the items in a database is established by a

A) Hierarchical schema

B) Network schema

C) Relational Schema

D) All of the above


6. ……………… table store information about database or about the system.

A) SQL

B) Nested

C) System

D) None of these


7. …………..defines the structure of a relation which consists of a fixed set of attribute-domain pairs.

A) Instance

B) Schema

c) Program

D) Super Key


8. ……………… clause is an additional filter that is applied to the result.

A) Select

B) Group-by

C) Having

D) Order by


9. A logical schema

A) is the entire database

B) is a standard way of organizing information into accessible parts.

C) Describes how data is actually stored on disk.

D) All of the above


10. ………………… is a full form of SQL.

A) Standard query language

B) Sequential query language

C) Structured query language

D) Server side query language


11) A relational database developer refers to a record as

A. a criteria

B. a relation

C. a tuple

D. an attribute


12) .......... keyword is used to find the number of values in a column.

A. TOTAL

B. COUNT

C. ADD

D. SUM


13) An advantage of the database management approach is

A. data is dependent on programs

B. data redundancy increases

C. data is integrated and can be accessed by multiple programs

D. none of the above


14) The collection of information stored in a database at a particular moment is called as ......

A. schema

B. instance of the database

C. data domain

D. independence


15) Data independence means

A. data is defined separately and not included in programs.

B. programs are not dependent on the physical attributes of data

C. programs are not dependent on the logical attributes of data

D. both B and C


16) A ......... is used to define overall design of the database

A. schema

B. application program

C. data definition language

D. code


17) Key to represent relationship between tables is called

A. primary key

B. secondary key

C. foreign key

D. none of the above


18) Grant and revoke are ....... statements.

A. DDL

B. TCL

C. DCL

D. DML


19) DBMS helps achieve

A. Data independence

B. Centralized control of data

C. Neither A nor B

D. Both A and B


20) .......... command can be used to modify a column in a table

A. alter

B. update

C. set

D. create


Answers:


1. C) Program
2. B) Domains
3. A) Entity
4. C) Data Flow Diagram
5. A) Hierarchical schema
6. C) System
7. B) Schema
8. C) Having
9. B) is a standard .. accessible parts.
10. C) Structured query language
11) C. a tuple
12) B. COUNT
13) C. data is integrated and can be accessed by multiple programs
14) B. instance of the database
15) D. both B and C
16) A. schema
17) C. foreign key
18) C. DCL
19) D. Both A and B
20) A. alter


Related Posts

 


For other more Multiple Choice Questions (MCQs): Click Here

Secure Socket Layer (SSL)


Secure Socket Layer (SSL) is a security protocol that was developed by Netscape Communications Corporation, along with RSA Data Security, Inc. The Primary goal of the SSL protocol is to provide a private channel between communicating applications, which ensures privacy of data, authentication of the partners, and integrity. The Secure Socket Layer (SSL) technology was used for the websites or web applications which need more security.


Schematic representation of the SSL handshake ...
 SSL handshake protocol with two way authentication with certificates. (Photo credit: Wikipedia)

 

Secure Socket Layer (SSL) is composed of two layers:


  • At the lower layer, a protocol for transferring data using a variety of predefined cipher and authentication combinations, called the SSL Record Protocol.
  • On the upper layer, a protocol for initial authentication and transfer of encryption keys, called the SSL Handshake Protocol.

An SSL session is initiated as follows:


  • On the client (browser), the user requests a document with a special URL that starts with https: instead of http: either by typing it into the URL input field, or by clicking the link. For example the major search engines like Google, Yahoo, Bing and other money transactions websites uses Secure Socket Layer (SSL).The client computers which do not installed the Secure Socket Layer (SSL) certificates on their computer unable to browse those sites.
  • The client code recognizes the SSL request and establishes a connection through TCP port 443 to the SSL code on the server.
  • The client then initiates the SSL handshake phase, using the SSL Record Protocol as a carrier. At this point, there is no encryption or integrity checking built into the connection.

The Secure Socket Layer (SSL) Protocol addresses the following security issues:


  • Privacy: After the symmetric key is established in the initial handshake, the messages are encrypted using this key.
  • Integrity: Messages contain a message authentication code (MAC) ensuring the message integrity.
  • Authentication: During the handshake, the client authenticates the server using an asymmetric or public key. It can also be based on certificates. SSL requires that each message is encrypted and decrypted and therefore has a high performance and resource cost.

Secure Socket Layer (SSL) Protocol


The SSL protocol is located at the top of the transport layer. SSL is also a layered protocol itself. It simply takes the data from the application layer, re-formats it, and transmits it to the transport layer. SSL handles a message as follows.

The sender performs the following tasks

  • Takes the message from upper layer.
  • Fragments the data to manageable blocks.
  • Optionally compress the data.
  • Applies a message authentication code (MAC)
  • Encrypts the data.
  • Transmits the result to the lower layer.

 The receiver performs the following tasks.


  • Takes the data from lower layer.
  • Decrypts.
  • Verifies the data with the negotiated MAC key.
  • Decompress the data if compression was used.
  • Reassembles the message.
  • Transmits the message to the upper layer.


An SSL session works in different states. These states are session and connection states. The SSL handshake protocol coordinates the states of the client and the server. In addition, there are read and write states defined to coordinate the encryption according to the change Cipher Spec messages.


Change Cipher Spec Protocol


The change Cipher Spec protocol is responsible for sending change Cipher Spec messages. At any time, the client can request to change current cryptographic parameters such as the handshake key exchange. Following the change Cipher Spec notification, the client sends a handshake key exchange and if available, certificate verify messages, and the server sends a change Cipher Spec message after processing the key exchange message. After that, the newly agreed keys will be used until the next change Cipher Spec request. The change Cipher Spec message is sent after the hello messages during the negotiation.


SSL handshake protocol


The SSL handshake protocol allows the client and server to determine the required parameters for and SSL connection such as protocol version, cryptographic algorithms, optional client or server authentication, and public key encryption methods to generate shared secrets. During this process, all handshake messages are forwarded to the SSL record layer to be encapsulated into special SSL messages. Figure below illustrates an SSL handshake process.



Secure Socket Layer (SSL)



SSL record protocol


After the master key has been determined, the client and server can use it to encrypt application data. The SSL record protocol specifies a format for these messages in general, they include a message digest ensure that they have not been altered and the whole message is encrypted using a symmetric cipher.



Other Internet security methods are: Transport Layer Security (TSL), Pretty Good Privacy (PGP) and Firewall, I will post about them later. Keep following this blog.



You Might also view the following Related Posts

For more Posts: Click Here

Internet Security & IP Security (IPSec)


English: Encapsulating one IP packet in anothe...
English: Encapsulating one IP packet in another IP packet (Photo credit: Wikipedia)
Internet Security is the securing web server and client (browser) from the possible attacks over the Wide Area Networks or Internet. Internet security is a type of Computer Security or the network Security. It includes mainly specific security protocols like IPSec (Internet Security Protocol), SSL (Secure Socket Layer) or TSL (Transport Layer Security). Internet Security also describes about PGP (Pretty Good Privacy) which is designed to create authenticated and confidential e-mails. It also discuss about Firewalls and Antivirus Programs.


# IP Security (IPSec)


IP Security (IPSec) is collection of protocols designed by Internet Engineering Task Force (IETF) to provide security for a packet at the network level. It helps to create authenticated and confidential packets for the IP layer. IPSec operates in one of the following two modes.


i) Transport Mode


In this mode, IPSec protects what is delivered from the transport layer to the network layer. i.e. the transport mode protects the network layer payload, the payload to be encapsulated in the network layer. This mode does not protect the IP header, i.e. it protects only the packet from the transport layer. In this mode, the IPSec header and trailer are added to the information coming from the transport layer. The IP header is added later. This mode is normally used when we need host-to-host protection of data. The sending host uses IPSec to authenticate and / or encrypt the payload delivered from the transport layer. The receiving host uses IPSec to check the authentication and / or decrypt the IP Packet and deliver it to the transport layer.


ii) Tunnel Mode

 

Internet Security & IP Security



Tunneling or encapsulation is a common technique in packet-switched networks. It consists of wrapping a packet in a new one. That is, a new header is attached to the original packet. The entire original packet becomes the payload of the new one, as shown in Figure. In this mode, IPSec protects the entire IP Packet. It takes an IP packet including the header, applies IPSec security methods to the entire Packet, and then adds a new IP header. The new IP header has different information than the original IP Header.

In general, tunneling is used to carry traffic of one protocol over a network that does not support that protocol directly. For example, NetBIOS or IPX can be encapsulated in IP to carry it over a TCP/IP WAN link. In the case of IPSec, IP is tunneled through IP for a slightly different purpose: To provide total protection, including the header of the encapsulated Packet. Tunneling requires intermediate processing of the original packet while en-route. The destination specified in the outer header, usually and IPSec firewall of router, receives the tunneled packet, extracts the original packet, and sends it to the ultimate destination. The processing cost is compensated by the extra security. A notable advantage of IP tunneling is the possibility to exchange packets with private IP addresses between two intranets over the public Internet, which requires globally unique addresses.


The IPsec framework has three main components, Authentication Header(AH), Encapsulating Security Payload (ESP) and Internet Key Exchange (IKE).


Authentication Header (AH)


AH is used to provide integrity and authentication of IP datagrams. Replay protection is also possible. Although its usage is optional, the replay protection service must be implemented by any IPsec compliant system. The services are connectionless, they work on a per-packet basis. AH is used in two modes, transport mode and tunnel mode.


Encapsulating Security Payload (ESP)

 

English: IP packet with IPsec ESP
English: IP packet with IPsec ESP  (Photo credit: Wikipedia)
ESP is used to provide integrity check, authentication and encryption to IP datagrams. Optional replay protection is also possible. These services are connectionless, in that they operate on a per-packet basis. Encryption can be selected independently of other services. It is highly recommended that, if encryption is enabled, integrity check and authentication be turned on. Like AH, ESP can be used in two ways: Transport mode and tunnel mode.


Internet Key Exchange Protocol (IKE)


The internet Key Exchange (IKE) framework, previously referred to as ISAKMP/Oakley, supports automated negotiation of security Associations, and automated generation and refresh of cryptographic keys. The ability to perform these functions with little or no manual configuration of machines is a critical element to any enterprise-scale IPsec deployment. Internet security association and key management protocol (ISAKMP) is a framework that defines the management of security associations (negotiable, modify, delete) and keys, and it also defines the payloads for exchanging key generation and authentication data. Internet Key exchange (IKE) is a protocol that uses parts of ISAKMP and the Oakley and SKEME key exchange protocols to provide management of keys and security associations for the IPsec AH and ESP protocols and ISAKMP itself.


# Secure Socket Layer (SSL)




You Might also view the following Related Posts 

For more Posts: Click Here

الاشتراك في: الرسائل (Atom)