When a database is migrated to a new server, two fundamental configurations for any connecting application must be addressed. First, the application's connection string, which contains the server's address (hostname or IP), must be updated to point to the new location; this is the 'mapping' (D). Second, security principals, such as the service account's login and database user permissions, must be recreated or re-established on the new server instance, as server-level permissions are not always included in a database backup/restore migration (A). Failure in either of these steps is a primary cause of application connectivity failure after a database move.

B. This is an unsubstantiated assumption. The existence of a new reporting system would not inherently cause the existing one to fail; it would be a planned decommissioning.

C. Locked jobs are typically a symptom of a connection failure, not the root cause. The application cannot process jobs because it cannot connect to the database first.

E. This is a generic statement of the problem's symptom. The specific reasons why the server is not permitted are the lack of correct permissions (A) or a firewall block.

F. It is highly improbable that improved database performance would cause a complete application failure. Applications are designed to process data as it is received.

1. Microsoft. (2023). Post-migration validation and optimization guide. Microsoft Learn. In the "Post-migration steps" section

two key activities are highlighted: Remediate applications ("After you migrate the data to the target environment

you need all the applications that formerly consumed the source to start consuming the target. Accomplishing this will in some cases require changes to the applications

" which includes updating connection strings) and Security (verifying and re-establishing logins

roles

and permissions on the new server instance).

2. Oracle. (2021). Database Administrator's Guide

19c. F10897-16

Chapter 20

"Transporting Data". The post-transportation tasks implicitly require administrators to ensure client connectivity

which involves updating connection descriptors (e.g.

in tnsnames.ora) to point to the new database location and verifying that user accounts and privileges are correctly configured in the new environment.

3. Schwarz

T. (2018). PostgreSQL 10 Administration Cookbook. Packt Publishing. Chapter 10

"Migration and Upgrades

" Section: "Migrating data to a new major version." The post-migration checklist includes steps such as "Adjust authentication rules (pghba.conf)" and "Point your applications to the new server

" which directly correspond to managing permissions and updating location mapping.

An on-path (man-in-the-middle) attack places the adversary between the victim and a legitimate service, allowing interception and modification of traffic. A rogue or compromised Wi-Fi access point that silently proxies requests and alters DNS responses so the victim is “redirected” to cloned (phishing) versions of real sites is a canonical manifestation of an on-path attack, because the attacker transparently relays and tampers with the communication stream.

B. Site crash is a denial-of-service condition; no adversary sits “in the path” intercepting traffic.

C. Unsolicited email is a direct phishing attempt, not traffic interception between two parties.

D. Erroneous data disclosure stems from poor application or database permissions, not intermediary traffic manipulation.

1. Conti

M.

Dragoni

N.

& Lesyk

V. “A Survey of Man-in-the-Middle Attacks.” IEEE Communications Surveys & Tutorials

vol. 18

no. 3

2016

sec. III-A

pp. 2050-2052. DOI:10.1109/COMST.2016.2548426

2. Cisco Secure Endpoint Protection White Paper

“MitM Attacks

” doc ID: CSWP-2186

v2

2021

pp. 3-4.

3. MIT OpenCourseWare

6.858 “Computer Systems Security

” Lecture 9: Network Attacks (Fall 2020)

slides 8-10.

4. NIST Special Publication 800-115

“Technical Guide to Information Security Testing & Assessment

” 2008

§4.5.3 (Man-in-the-Middle Testing)

p. 4-10.

Biometric locks are a form of physical access control that uses unique biological characteristics (e.g., fingerprints, iris scans) for authentication. Placing these locks on doors to server rooms or on individual server racks is a preventative security measure. It ensures that only authorized personnel can gain physical proximity to the hardware, thereby being the most effective method listed for directly preventing unauthorized physical access and subsequent tampering. This control addresses the threat at the point of physical entry, which is the prerequisite for hardware tampering.

B. Strong password policy: This is a logical access control measure that protects against unauthorized access to software and data, not the physical hardware itself.

C. Network firewall: This is a network security control that filters traffic. It provides no protection against an individual physically accessing and tampering with a server.

D. Surveillance cameras: This is a detective and deterrent control, not a preventative one. While cameras can record an incident and may deter some actors, they do not physically stop someone from tampering.

1. National Institute of Standards and Technology (NIST). (2020). Security and Privacy Controls for Information Systems and Organizations (NIST Special Publication 800-53

Revision 5).

Reference: Section on Control Family: Physical and Environmental Protection (PE)

Control: PE-3 Physical Access Control.

Details: This control specifies the need to "Control all physical access points... and manage physical access to the system to permit only authorized individuals." The discussion elaborates on using physical access devices

including biometric-based authentication mechanisms

as a primary method to enforce these controls and prevent unauthorized physical access.

2. Purdue University. (n.d.). Information Security and Privacy (POL-IX.A.1). Physical Security Standard.

Reference: Section 3.1

"Physical Access Controls."

Details: The standard outlines that "Physical access to University IT Resources must be controlled." It lists various controls

including electronic access control systems like card readers and biometrics

to secure areas housing critical infrastructure

explicitly to prevent "tampering

theft

or unauthorized access."

3. Von Solms

R.

& van Niekerk

J. (2013). From information security to cyber security. Computers & Security

38

97-102.

Reference: Page 100

Section 4

"The different layers of cyber security."

DOI: https://doi.org/10.1016/j.cose.2013.04.004

Details: The paper discusses the layered approach to security

clearly distinguishing between technical/logical security (like passwords and firewalls) and physical security. It identifies physical security controls as the foundational layer necessary to protect hardware from theft or tampering.

NoSQL databases represent a category of non-relational database systems designed for high availability, scalability, and flexibility with various data models. The four primary types of NoSQL databases are key-value stores, document databases, column-family stores, and graph databases. A key-value store is one of the most fundamental NoSQL models, storing data as a simple collection of key-value pairs. The key is a unique identifier used to retrieve an associated value, making this model highly efficient for session management, caching, and user profiles where data is accessed via a known key.

A. Hierarchical: This is an early, pre-relational database model with a tree-like structure, distinct from the modern NoSQL database categories.

C. Cloud: This refers to a deployment model or environment (e.g., public, private, hybrid cloud) and not a type of database structure.

D. Object-oriented: This is a separate database model that stores data as objects, as defined in object-oriented programming, and is not one of the primary NoSQL types.

---

1. Carnegie Mellon University

Database Group. (2022). 15-445/645 Intro to Database Systems

Lecture #21: NoSQL Databases. Slide 17

"NoSQL System Types". The lecture explicitly categorizes NoSQL systems into four types: Key-Value

Document

Column-Family

and Graph. Retrieved from https://15445.courses.cs.cmu.edu/fall2022/slides/21-nosql.pdf

2. Amazon Web Services (AWS). (n.d.). What is a Key-Value Database? Official AWS Documentation. In the introductory paragraph

it states

"A key-value database is a type of nonrelational database... Key-value databases are one of four common types of NoSQL databases..." Retrieved from https://aws.amazon.com/nosql/key-value/

3. Han

J.

Kamber

M.

& Pei

J. (2012). Data Mining: Concepts and Techniques (3rd ed.). Morgan Kaufmann. In Chapter 1

Section 1.4.3

"Other Kinds of Data

" the text distinguishes between traditional database models (relational

hierarchical

network) and newer systems

including object-oriented databases and transactional databases

while implicitly placing NoSQL types like key-value stores in a modern context for handling unstructured data.

An index stores key values in a secondary, sorted structure that allows the optimizer to locate the desired rows with logarithmic-time lookups instead of full table scans, greatly accelerating data retrieval while leaving the underlying table unchanged.

A. Indexes consume additional disk space; they do not assist with space allocation.

C. Because they add extra on-disk and in-memory structures (buffer cache pages), indexes increase, not reduce, memory and storage usage.

D. Query plans are regenerated by the optimizer each execution; an index may be chosen within a plan, but its creation does not itself “update” the plan.

1. PostgreSQL Documentation v15

Sec. 11.1 “Indexes and Index Types”: “The primary purpose of an index is to increase database performance … faster retrieval.”

2. Oracle Database Concepts 19c

Ch. 15 “Indexing and Partitioning

” p. 15-2: “Indexes provide faster access to data…”

3. Silberschatz

Korth & Sudarshan

“Database System Concepts

” 7th ed.

McGraw-Hill

§14.1

p. 481: “The basic motivation for creating an index is to speed up record retrieval.”

4. MySQL 8.0 Reference Manual

§8.3.1 “How MySQL Uses Indexes”: “Indexes are used to find rows with specific column values quickly.”