IBM
C2150-609 · Question #51
An IBM Security Access Manager V9.0 deployment at a customer has enabled audit.authz, audit.authn, audit,http for meeting auditing requirements and results in large volume of audit records and poses…
The correct answer is C. Define a POP with the audithttp set to "no"; attach this to the static resources. See the full explanation below for the reasoning.
Question
An IBM Security Access Manager V9.0 deployment at a customer has enabled audit.authz, audit.authn, audit,http for meeting auditing requirements and results in large volume of audit records and poses significant data management challenges to the client. The customer wants to exclude the audit events to certain static resources such as images. What action should be taken to implement this?
Options
- ADisable audit.http events only
- BDisable audit.http.unsuccessful events only
- CDefine a POP with the audithttp set to "no"; attach this to the static resources
- DDefine an ACL with the audithttp operation set to "no"; attach this to the static resources
How the community answered
(56 responses)- A5% (3)
- B9% (5)
- C82% (46)
- D4% (2)
Community Discussion
No community discussion yet for this question.