Which of the following is a security practice for databases?

• A. Allow anonymous access
• B. Encrypt the database
• C. Store passwords in plain text
• D. Disable backups

Answer: (B)

Encrypting the database protects data at rest. By turning stored information into unreadable ciphertext unless the proper keys are available, encryption minimizes the damage if the storage is stolen, lost, or breached. Key management matters: keep encryption keys separate from the data, control who can access them, and rotate them regularly. This practice is most effective when paired with protections for data in transit (like TLS) and strong access controls, auditing, and least- privilege principles.

Resting on insecure choices undermines security: anonymous access bypasses authentication, allowing anyone to read or modify data; storing passwords in plain text exposes credentials if the database is compromised; disabling backups eliminates recovery options and weakens resilience.