The InfoSec team has directed compliance database activity monitoring without agents on a hosted database server in the public IaaS. Which of the following configurations is needed to ensure this…

Question

Options

• AConfigure the agent configuration file to log to the syslog server.
• BConfigure sniffing mode on database traffic.
• CImplement built-in database tracking functionality.
• DImplement database encryption and secure copy to the NAS.

• A
  15% (8)
• B
  72% (39)
• C
  9% (5)
• D
  4% (2)

Explanation

The key requirement is database activity monitoring (DAM) without agents on the hosted IaaS server. Agentless DAM is accomplished by sniffing (passively mirroring) the network traffic between database clients and the database server. A DAM sensor captures all queries, responses, and connection events at the network layer-no software installation on the database host is required. Option A explicitly involves an agent configuration file, which contradicts the 'without agents' requirement. Option C (built-in database tracking, such as native audit logs) does not require a separate agent but is typically limited in scope, may require database-level configuration access, and often cannot provide the real-time compliance visibility InfoSec demands-sniffing mode provides a more complete, independent audit trail. Option D (encryption + secure copy to NAS) addresses data protection, not activity monitoring.

No community discussion yet for this question.