nerdexam
CompTIA

CV0-002 · Question #7

The InfoSec team has directed compliance database activity monitoring without agents on a hosted database server in the public IaaS. Which of the following configurations is needed to ensure this…

The correct answer is B. Configure sniffing mode on database traffic. To achieve agentless compliance database activity monitoring on a hosted IaaS database server, the necessary configuration involves passively monitoring network traffic for database interactions.

Security

Question

The InfoSec team has directed compliance database activity monitoring without agents on a hosted database server in the public IaaS. Which of the following configurations is needed to ensure this requirement is achieved?

Options

  • AConfigure the agent configuration file to log to the syslog server.
  • BConfigure sniffing mode on database traffic.
  • CImplement built-in database tracking functionality.
  • DImplement database encryption and secure copy to the NAS.

How the community answered

(21 responses)
  • A
    5% (1)
  • B
    81% (17)
  • C
    5% (1)
  • D
    10% (2)

Why each option

To achieve agentless compliance database activity monitoring on a hosted IaaS database server, the necessary configuration involves passively monitoring network traffic for database interactions.

AConfigure the agent configuration file to log to the syslog server.

Configuring an agent configuration file explicitly contradicts the requirement for "without agents" as it implies the presence of an agent.

BConfigure sniffing mode on database traffic.Correct

Configuring sniffing mode on database traffic involves deploying a network-based appliance or software that can intercept and analyze database communications over the network. This method allows for comprehensive monitoring of database activity without requiring any software or 'agent' to be installed directly on the database server itself, satisfying the agentless requirement.

CImplement built-in database tracking functionality.

While built-in database tracking functionality exists, it typically involves logging or features that run within the database instance, which is often considered an integrated form of agent or functionality that operates inside the server, not truly agentless from an external monitoring perspective.

DImplement database encryption and secure copy to the NAS.

Implementing database encryption and secure copy to NAS focuses on data security and storage, not on the active monitoring of database operations for compliance purposes.

Concept tested: Agentless database activity monitoring

Topics

#database security#activity monitoring#agentless monitoring#network sniffing

Community Discussion

No community discussion yet for this question.

Full CV0-002 Practice