You are working on a project for a healthcare provider that provides health care services to the customers.
The healthcare provider wants that only nurses and doctors must be able to access medical records.
It should not be visible to the billing department.
Which of the following types of security would you implement in this scenario?
Click on the arrows to vote for the correct answer
A. B. C. D.Correct Answer: A
Column level security is used to restrict the column access to protect the sensitive data.
If you want that only some specific person or department shouldbe able to view some data, column-level security works the best.Option A is correct.
As we want only nurses and doctors to be able to access medical records and records should not be visible to the billing department, column-level security will do the required.
Option B is incorrect.
Row-level security is the feature that can be applied on databases to enable fine-grained access over rows in a database table for restricted control upon who can access which type of data.
Option D is incorrect.
Dynamic data masking won't help in restricting the column access only to some specific persons.
Option D is incorrect.
Table Level Security is not a good choice.
References:
To know more about column level security, please visit the below-given link:
The security measure that would be suitable for this scenario is "Row-level security."
Row-level security restricts the access to the rows of the table based on the user's role or group membership. It allows access to only those rows that satisfy the conditions defined in the security policy. This security policy is defined at the database level.
In this scenario, the healthcare provider wants to restrict access to medical records to only nurses and doctors, and not to the billing department. Row-level security can be applied to the table containing medical records, and the policy can be set to allow access to only nurses and doctors.
Column-level security, on the other hand, restricts access to the columns of a table based on the user's role or group membership. It may not be the appropriate security measure in this scenario, as it would allow the billing department to access the table but restrict their access to the columns containing sensitive information.
Dynamic Data Masking is a security feature that hides sensitive data by masking it in the output. It is not a suitable security measure in this scenario, as it does not restrict access to the data, but only hides it in the output.
Table-level security restricts access to the entire table based on the user's role or group membership. It may not be suitable in this scenario, as it would restrict access to the entire table for the billing department, whereas they may need to access other non-sensitive tables for billing purposes.
Therefore, row-level security is the most appropriate security measure in this scenario.