Part VII — Protecting Data

Chapter 19

Database Security and Access Controls

Domain 7

📖 Key Topics Covered

  • ▸ Database Security and Access
  • ▸ Database Fundamentals
  • ▸ Database Types
  • ▸ USE CASE
  • ▸ Structured data with
  • ▸ Cassandra, Neo4j
  • ▸ SQL Injection Attacks
  • ▸ SQL Injection Prevention
  • ▸ Database Security Controls
  • ▸ Access Controls
  • ▸ CREATE USER 'app_user'@'localhost' IDENTIFIED BY 'StrongP@ssw0rd!';
  • ▸ GRANT SELECT, INSERT ON customer_db.orders TO 'app_user'@'localhost';
  • ▸ REVOKE DELETE, DROP ON customer_db.* FROM 'app_user'@'localhost';
  • ▸ SHOW GRANTS FOR 'app_user'@'localhost';
  • ▸ Database Encryption

🔑 Key Terms

Access Controls Databases

See the full definitions in the Glossary and test yourself with Flashcards.

Assessment Tips

💡 Assessment Tip

SQL injection is one of the most tested topics. Know how it works (unsanitized input in SQL queries), know the primary defense (parameterized queries/prepared statements), and know that input validation and WAFs are additional layers of defense. Be a

← Chapter 18 All Chapters Chapter 20 →