CND Application And Data Protection Practice Question
An organization is implementing database transparent data encryption (TDE) and needs to understand its architectural security boundaries. Which THREE security characteristics or limitations are true regarding TDE?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
TDE does not protect data in memory (RAM) or prevent authorized database users/administrators with SELECT privileges from viewing decrypted data
TDE protects data at rest on disk and backup files, but does not protect data in transit or data accessed in memory while the database is running.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
TDE does not protect data in memory (RAM) or prevent authorized database users/administrators with SELECT privileges from viewing decrypted data
Why this is correct
Once data is loaded into memory or accessed by authenticated users, TDE does not restrict query visibility.
- ✗
TDE prevents SQL injection attacks by automatically sanitizing all incoming query parameters
Why it's wrong here
TDE provides storage encryption, not query sanitization or input validation against SQL injection.
- ✓
TDE does not protect data in transit across the network between client applications and the database server
Why this is correct
Network transport encryption (like TLS) is required to protect data in transit, as TDE only encrypts storage files.
- ✓
TDE encrypts database data files, log files, and backups at rest on storage media
Why this is correct
TDE protects files on disk and backup media against offline physical theft.
- ✗
TDE eliminates the need for database user access controls and role-based permissions
Why it's wrong here
Access controls remain fully necessary because TDE decrypts data transparently for authenticated queries.
About these practice questions
Courseiva writes every CND question from scratch — 323 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official EC-Council exam blueprint
This CND practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CND exam.