CV0-002 · Question #7
The InfoSec team has directed compliance database activity monitoring without agents on a hosted database server in the public IaaS. Which of the following configurations is needed to ensure this…
The correct answer is B. Configure sniffing mode on database traffic. To achieve agentless compliance database activity monitoring on a hosted IaaS database server, the necessary configuration involves passively monitoring network traffic for database interactions.
Question
The InfoSec team has directed compliance database activity monitoring without agents on a hosted database server in the public IaaS. Which of the following configurations is needed to ensure this requirement is achieved?
Options
- AConfigure the agent configuration file to log to the syslog server.
- BConfigure sniffing mode on database traffic.
- CImplement built-in database tracking functionality.
- DImplement database encryption and secure copy to the NAS.
How the community answered
(21 responses)- A5% (1)
- B81% (17)
- C5% (1)
- D10% (2)
Why each option
To achieve agentless compliance database activity monitoring on a hosted IaaS database server, the necessary configuration involves passively monitoring network traffic for database interactions.
Configuring an agent configuration file explicitly contradicts the requirement for "without agents" as it implies the presence of an agent.
Configuring sniffing mode on database traffic involves deploying a network-based appliance or software that can intercept and analyze database communications over the network. This method allows for comprehensive monitoring of database activity without requiring any software or 'agent' to be installed directly on the database server itself, satisfying the agentless requirement.
While built-in database tracking functionality exists, it typically involves logging or features that run within the database instance, which is often considered an integrated form of agent or functionality that operates inside the server, not truly agentless from an external monitoring perspective.
Implementing database encryption and secure copy to NAS focuses on data security and storage, not on the active monitoring of database operations for compliance purposes.
Concept tested: Agentless database activity monitoring
Topics
Community Discussion
No community discussion yet for this question.