CAS-005 · Question #129
A SIEM generated an alert after a third-party database administrator, who had recently been granted temporary access to the repository, accessed business-sensitive content in the database. The SIEM…
The correct answer is C. Database activity monitoring. Database activity monitoring (DAM) tracks user actions within databases and generates alerts for anomalous behavior, such as unauthorized access to sensitive content. Database field tokenization protects sensitive data but does not monitor access. Database decoy involves…
Question
A SIEM generated an alert after a third-party database administrator, who had recently been granted temporary access to the repository, accessed business-sensitive content in the database. The SIEM had generated similar alerts before this incident. Which of the following best explains the cause of the alert?
Options
- ADatabase field tokenization
- BDatabase decoy
- CDatabase activity monitoring
- DDatabase integrity enforcement
How the community answered
(26 responses)- A8% (2)
- B12% (3)
- C77% (20)
- D4% (1)
Explanation
Database activity monitoring (DAM) tracks user actions within databases and generates alerts for anomalous behavior, such as unauthorized access to sensitive content. Database field tokenization protects sensitive data but does not monitor access. Database decoy involves creating fake data to detect misuse but is unrelated to monitoring. Database integrity enforcement ensures data accuracy but does not generate access alerts.
Community Discussion
No community discussion yet for this question.