Multiple-Choice Questions On Securing MySQL Server

Here are the collections of Multiple-Choice questions on securing MySQL server includes MCQ questions on securing the MySQL server daemon and the grant options that determine the user’s SSL requirements. It includes objective questions on different security options that can use on MySQL server daemon and the different SSL options used on MySQL connection.

1) You can use the security option … when you start the MySQL server daemon (mysqld) that places the server in a restricted environment.
A. –skip-networking
B. –chroot
C. –skip-show-database
D. –skip-name-resolve

2) The security option … in the mysqld daemon will prevent the use of TCP/IP sockets when connecting to MySQL.
A. –skip-networking
B. –chroot
C. –skip-show-database
D. –skip-name-resolve

3) The security option … in the mysqld daemon prevents the use of hostnames when connecting to the MySQL database.
A. –skip-networking
B. –chroot
C. –skip-show-database
D. –skip-name-resolve

4) When using the… option of grant option, any attempts to connect in an insecure fashion will restart in an “Access denied” error.
A. REQUIRE X509
B. REQUIRE ISSUER
C. REQUIRE SSL
D. REQUIRE CIPHER

5) The grant option … forces the user to provide a valid certificate authority (CA) certificate.
A. REQUIRE X509
B. REQUIRE ISSUER
C. REQUIRE SSL
D. REQUIRE CIPHER

6) The grant option … forces the user to provide a valid certificate issued by a valid CA issuer.
A. REQUIRE X509
B. REQUIRE ISSUER
C. REQUIRE SSL
D. REQUIRE CIPHER

7) State whether the following statements about the grant options are TRUE or FALSE.
i. The grant option, REQUIRE SSL forces the user to connect over SSL.
ii. The REQUIRE X509 option in the grant option will specify which CAs are valid and which are not.
A. i-TRUE, ii-TRUE
B. i-TRUE, ii-FALSE
C. i-FALSE, ii-TRUE
D. i-FALSE, ii-FALSE

8) … is the grant option in MySQL which enforces the use of recent encryption algorithms by forcing the user to connect using a particular cipher.
A. REQUIRE X509
B. REQUIRE ISSUER
C. REQUIRE SSL
D. REQUIRE CIPHER

9) The grant option… forces the user to provide a valid certificate including a valid certificate subject.
A. REQUIRE SUBJECT
B. REQUIRE ISSUER
C. REQUIRE SSL
D. REQUIRE CIPHER

10) State whether the following statements about –SSL option in MySQL are TRUE or FALSE.
i. The –SSL option indicates that the MySQL server should allow SSL connections.
ii. The –SSL option does not ensure nor required to initiate an SSL connection.
A. i-TRUE, ii-TRUE
B. i-TRUE, ii-FALSE
C. i-FALSE, ii-TRUE
D. i-FALSE, ii-FALSE

11) The SSL option … specifies the directory path where trusted SSL certificates in privacy-enhanced mail format are stored.
A. –ssl-ca
B. –ssl-capath
C. –ssl-cert
D. –ssl-cipher

12) The SSL option … specifies the location and name of a file containing a list of trusted SSL certificate authorities.
A. –ssl-ca
B. –ssl-key
C. –ssl-cert
D. –ssl-cipher

13) … is the SSL option in MySQL connection that specifies the location and name of the SSL certificates used to establish a secure connection.
A. –ssl-ca
B. –ssl-key
C. –ssl-cert
D. –ssl-cipher

14) The SSL option … specifies which encryption algorithms are allowable.
A. –ssl-ca
B. –ssl-key
C. –ssl-cert
D. –ssl-cipher

15) The SSL option … specifies the location and name of the SSL key used to establish the secure connection.
A. –ssl-ca
B. –ssl-key
C. –ssl-cert
D. –ssl-cipher

16) The security option … in the mysqld daemon prevents any user who does not possess the SHOW DATABASES to privilege from using the command to view a list of all databases hosted on the server.
A. –skip-networking
B. –chroot
C. –skip-show-database
D. –skip-name-resolve

17) State whether the following statements about the security option “–local-infile” that you will use when you start the mysql server daemon are TRUE or FALSE.
i. You can disable this option by setting it to 0.
ii. Enabling this option allows the client to load a file from their local machine.
A. i-TRUE, ii-TRUE
B. i-TRUE, ii-FALSE
C. i-FALSE, ii-TRUE
D. i-FALSE, ii-FALSE

18) The security option … in the mysqld daemon prevents any user from creating new users via the GRANT command if they do not also possess the INSERT privilege for the user table.
A. –skip-networking
B. –local-infile
C. –user-create
D. –safe-user-create

Answers: