Question 101

Explanation

The correct answer: Role-based access controls allow for the assignment of specific access permissions to individual users or user groups based on their roles and responsibilities within the organization. This ensures that only authorized users have access to the DBMS and prevents unauthorized access. The incorrect answers: While implementing strong password policies is important for protecting access to the DBMS, it is not the MOST effective way to protect against unauthorized access. Strong password policies can be easily bypassed by determined attackers, and do not provide the granular control over access that role-based access controls do. Encrypting database files can protect against unauthorized access in the event that the files are stolen or accessed without proper authorization, but it does not prevent unauthorized access to the DBMS itself. Encryption should be used in conjunction with other security measures, such as role-based access controls, to provide the MOST effective protection. Antivirus software can help protect against malicious software that may try to gain access to the DBMS, but it is not the MOST effective way to prevent unauthorized access. Antivirus software cannot prevent access by authorized users who may misuse their privileges or act with malicious intent. Role-based access controls provide a more comprehensive approach to preventing unauthorized access.