DB2 10 for z/OS Database Administrator — Question 6

Which statement about label-based access control (LBAC) is TRUE?

Answer options

• A. LBAC protection can be applied to a nickname
• B. LBAC cannot be used to restrict access to a staging table
• C. LBAC cannot be used to restrict access to data of columns and rows in the same table
• D. LBAC protection for columns requires a table to contain a column that has a DB2SECURITYLABEL data type

Correct answer: D

Explanation

The correct answer is D because LBAC protection for specific columns indeed requires that the table has a column defined with a DB2SECURITYLABEL data type, enabling the enforcement of access controls. Options A, B, and C are incorrect as they misrepresent the capabilities and limitations of LBAC in terms of its application to nicknames, staging tables, and data access in columns and rows.