Which techniques can be used to enhance database security?

Which techniques can be used to enhance database security?

• A. Backup and Restore
• B. Tokenization and Salting
• C. Password Policies
• D. Access Logs

Answer: (B)

Protecting data stored in a database often relies on masking or transforming sensitive values and strengthening how credentials are stored. Tokenization substitutes real sensitive data (like credit card numbers) with non-sensitive tokens, so the database holds meaningless placeholders unless you can map them back securely. This greatly reduces what an attacker can use if the database is breached, because the actual data isn’t exposed in the compromised environment. Salting improves password security by adding a unique random value to each password before hashing, so even identical passwords produce different hashes and precomputed attack tables (rainbow tables) become ineffective. Together, these techniques directly reduce the risk of data exposure and credential compromise inside the database. Backup and Restore focuses on recovery and availability after data loss, not on preventing unauthorized access or protecting the stored contents. Password Policies are important for user authentication hygiene but don’t modify the data within the database itself to protect it. Access Logs are essential for detecting and auditing activity, yet they don’t by themselves prevent data exposure; they help you respond after a breach.

Protecting data stored in a database often relies on masking or transforming sensitive values and strengthening how credentials are stored. Tokenization substitutes real sensitive data (like credit card numbers) with non-sensitive tokens, so the database holds meaningless placeholders unless you can map them back securely. This greatly reduces what an attacker can use if the database is breached, because the actual data isn’t exposed in the compromised environment. Salting improves password security by adding a unique random value to each password before hashing, so even identical passwords produce different hashes and precomputed attack tables (rainbow tables) become ineffective. Together, these techniques directly reduce the risk of data exposure and credential compromise inside the database.

Backup and Restore focuses on recovery and availability after data loss, not on preventing unauthorized access or protecting the stored contents. Password Policies are important for user authentication hygiene but don’t modify the data within the database itself to protect it. Access Logs are essential for detecting and auditing activity, yet they don’t by themselves prevent data exposure; they help you respond after a breach.