DBS-C01 Database Security Practice Question
Exhibit
[
{
"user": "admin",
"host": "10.0.1.5",
"db": "prod",
"command": "Query",
"time": "0",
"state": "Sending data",
"info": "SELECT * FROM credit_cards"
},
{
"user": "app_user",
"host": "10.0.2.10",
"db": "prod",
"command": "Query",
"time": "0",
"state": "Sending data",
"info": "SELECT card_number FROM credit_cards WHERE user_id=123"
}
]Refer to the exhibit. A database administrator is reviewing the output of 'SHOW FULL PROCESSLIST' on an Amazon RDS for MySQL DB instance. The company's security policy requires that all database users access only the minimum necessary data. Which user's activity should be investigated further?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The admin user, because the query is selecting all columns from the credit_cards table.
The admin user is executing a full scan of the credit_cards table, which is a security concern because it could be accessing unnecessary data. The app_user is querying a specific column with a condition, which is more appropriate. The admin user should have a more restrictive query. Option B is correct. Option A is wrong because the admin user's query is broad. Option C is wrong because the app_user's query is specific. Option D is wrong because both queries are selecting data, but the admin's is more concerning.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Both users, because they are both accessing the credit_cards table.
Why it's wrong here
Accessing the table is not inherently wrong; it's the scope of access.
- ✓
The admin user, because the query is selecting all columns from the credit_cards table.
Why this is correct
This violates the principle of least privilege; the admin should not be selecting all columns.
- ✗
The app_user, because the query is selecting card_number which is sensitive.
Why it's wrong here
The app_user has a legitimate need and is using a condition to limit rows.
- ✗
Neither user, because the queries are normal for their roles.
Why it's wrong here
The admin's query is overly broad.
Go deeper
Related to this question
About these practice questions
Courseiva writes every DBS-C01 question from scratch — 1,663 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DBS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DBS-C01 exam.