500-430 · Question #6
Which two AppDynamics user permissions should an administrator configure in order to protect private data such as credit card numbers? (Choose two.)
The correct answer is C. SQL Bind Variables E. Diagnostic Data Collectors. AppDynamics can collect sensitive data such as credit card numbers from various sources, such as SQL queries, error messages, HTTP headers, cookies, and so on. To protect this data from unauthorized access or exposure, an administrator should configure the user permissions for…
Question
Which two AppDynamics user permissions should an administrator configure in order to protect private data such as credit card numbers? (Choose two.)
Options
- AMemory Monitoring
- BError Detection
- CSQL Bind Variables
- DMonitoring Level
- EDiagnostic Data Collectors
- FPolicies
How the community answered
(33 responses)- B6% (2)
- C79% (26)
- D12% (4)
- F3% (1)
Explanation
AppDynamics can collect sensitive data such as credit card numbers from various sources, such as SQL queries, error messages, HTTP headers, cookies, and so on. To protect this data from unauthorized access or exposure, an administrator should configure the user permissions for the following features: SQL Bind Variables: This feature enables the agents to capture the values of the parameters that are passed to SQL queries. These values can contain sensitive data such as credit card numbers, passwords, or personal information. To prevent this data from being stored or displayed in the Controller UI, the administrator should disable the Capture SQL Bind Values permission for the users who do not need to see this data. Alternatively, the administrator can enable the Mask SQL Bind Values permission, which replaces the values with asterisks (*) in the UI. The administrator can also configure the agent properties to exclude or mask certain bind variables based on patterns or keywords. Diagnostic Data Collectors: This feature enables the agents to collect additional data from the application code, such as method arguments, return values, HTTP headers, cookies, and so on. These data can also contain sensitive information that should not be exposed to unauthorized users. To control the access to this data, the administrator should disable the View Diagnostic Data Collectors permission for the users who do not need to see this data. The administrator can also configure the agent properties to exclude or mask certain data collectors based on patterns or keywords. Other features that can collect sensitive data and require user permissions are Error Detection, Memory Monitoring, and Policies. However, these features are less likely to capture credit card numbers than SQL Bind Variables and Diagnostic Data Collectors.
Topics
Community Discussion
No community discussion yet for this question.