Securing Personal Information for Account Managers: Best Security Types for Financial Services | DP-203 Exam Preparation

Types of Security for Protecting Account Managers' Access to Personal Information | DP-203 Exam Preparation

Question

You work in a company that provides financial services to its customers.

The company wants to allow only its account managers to access the Social Service Number, Emails and other personal information.

Which of the following types of security will suit best in this scenario?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

Correct Answer: B

Column-level security allows restricting column access to protect the private or sensitive data.

For instance, if you need to ensure that a particular user 'Smith' can only access specific columns of a table, column-level security helps here.

Column-level security can be implemented with the GRANT T-SQL statement.

Option A is incorrect.

Row-level security can be applied on databases to allow fine-grained access over the rows in a table for restricted control upon who can access which type of data.

Option B is correct.

As we need to restrict column access and allow only the account managers to access the Social Service Number,Emails and other personal information, column-level security will work here.

Option C is incorrect.

Table Level Security is not the right option.

Option D is incorrect.

Dynamic data masking masks the data but here we need to restrict the column data access therefore column-level security is the right option.

To know more about column level security, please visit the below-given link:

In the given scenario, the company wants to restrict access to sensitive personal information, such as social security numbers and email addresses, to only its account managers. To achieve this, appropriate security measures must be implemented in the data storage system.

Out of the given options, the security type that best suits this scenario is "Column-level security." Column-level security allows access to specific columns in a table to be restricted based on user permissions. This means that only authorized users, such as account managers in this case, will be able to access the sensitive columns, while other users will be denied access.

Row-level security is a type of security that restricts access to specific rows in a table based on user permissions. This type of security is more suited for scenarios where users need to access specific rows in a table, rather than specific columns. In this scenario, the company wants to restrict access to specific columns, not specific rows, so row-level security is not the best fit.

Table-level security allows access to an entire table to be restricted based on user permissions. This type of security is not well suited for scenarios where specific columns need to be restricted, as it would restrict access to the entire table, not just specific columns.

Dynamic Data Masking is a security feature that hides sensitive data from non-authorized users by masking it. However, this type of security is not well suited for this scenario because it only masks the data, rather than restricting access to it. Masked data can still be accessed by users with appropriate permissions, which is not what the company wants.

Therefore, out of the given options, column-level security is the most appropriate choice for this scenario, as it allows access to specific columns to be restricted based on user permissions.