PostgreSQL Security Best Practices Quiz

1. What is the maximum length of a password hash that PostgreSQL stores with SCRAM-SHA-256?

32 characters

64 characters

Variable, depends on iterations

128 characters

2. True or False: Column-level privileges can be granted using the GRANT command in PostgreSQL.

True

False

3. Which command creates a new role with login privileges in PostgreSQL?

CREATE USER

CREATE ROLE

CREATE LOGIN

CREATE ACCOUNT

4. What is the purpose of a PostgreSQL certificate in SSL connections?

Authenticate the server to the client

Encrypt backup files

Hash user passwords

Manage role inheritance

5. Which postgresql.conf parameter restricts connections by IP address when pg_hba.conf is not available?

Listen_addresses

Max_connections

Trusted_hosts

Connection_filter

6. True or False: MD5 authentication is recommended for production PostgreSQL servers.

True

False

7. What does the password_encryption parameter control?

Default hashing algorithm for new passwords

SSL certificate encryption

Backup file encryption

Connection string encryption

8. Which PostgreSQL feature logs all database activity for audit compliance?

PgAudit

Log_statement

Audit_log

Access_log

9. True or False: The SUPERUSER role can bypass row-level security policies.

True

False

10. Which parameter in postgresql.conf controls password validity duration?

Password_lifetime

Password_encryption

Valid_until

Password_max_age

11. Which authentication method in PostgreSQL uses Kerberos for single sign-on?

Md5

Gss

Password

Trust

12. Which function encrypts data using a password in pgcrypto?

Pgp_sym_encrypt

Encrypt_data

Cipher_password

Secure_encrypt

13. Row-level security (RLS) in PostgreSQL restricts access at which level?

Database level

Schema level

Individual row level

Column level

14. What does ssl=on in postgresql.conf enable?

Encrypted client-server connections

Row-level security policies

Password encryption in pg_hba.conf

Automatic backup encryption

15. Which PostgreSQL extension provides transparent data encryption?

Pgcrypto

Ssl

Uuid

Json

16. What is the purpose of the REVOKE command in PostgreSQL?

Delete user accounts

Remove previously granted privileges

Lock database connections

Encrypt sensitive data

17. Which command grants all privileges on a table to a specific user?

ALLOW USER ON TABLE

GRANT ALL ON TABLE to user

PERMIT USER TABLE

AUTHORIZE USER TABLE

18. What does the SCRAM-SHA-256 authentication method provide that md5 does not?

Faster performance

Resistance to rainbow table attacks

Support for multiple databases

Automatic password expiration

19. Which PostgreSQL role attribute prevents a user from logging in?

NOSUPERUSER

NOINHERIT

NOLOGIN

NOCREATEDB

20. What is the default pg_hba.conf authentication method for local connections?

Trust

Md5

Peer

Password

PostgreSQL Professional Database Security Quiz

1. What is the maximum length of a password hash that PostgreSQL stores with SCRAM-SHA-256?

2.

What first name or nickname would you like us to use?

2. True or False: Column-level privileges can be granted using the GRANT command in PostgreSQL.

3. Which command creates a new role with login privileges in PostgreSQL?

4. What is the purpose of a PostgreSQL certificate in SSL connections?

5. Which postgresql.conf parameter restricts connections by IP address when pg_hba.conf is not available?

6. True or False: MD5 authentication is recommended for production PostgreSQL servers.

7. What does the password_encryption parameter control?

8. Which PostgreSQL feature logs all database activity for audit compliance?

9. True or False: The SUPERUSER role can bypass row-level security policies.

10. Which parameter in postgresql.conf controls password validity duration?

11. Which authentication method in PostgreSQL uses Kerberos for single sign-on?

12. Which function encrypts data using a password in pgcrypto?

13. Row-level security (RLS) in PostgreSQL restricts access at which level?

14. What does ssl=on in postgresql.conf enable?

15. Which PostgreSQL extension provides transparent data encryption?

16. What is the purpose of the REVOKE command in PostgreSQL?

17. Which command grants all privileges on a table to a specific user?

18. What does the SCRAM-SHA-256 authentication method provide that md5 does not?

19. Which PostgreSQL role attribute prevents a user from logging in?

20. What is the default pg_hba.conf authentication method for local connections?