DBS-C01 · Question #348
A company has an Amazon Redshift cluster with database audit logging enabled. A security audit shows that raw SQL statements that run against the Redshift cluster are being logged to an Amazon S3…
The correct answer is C. Set the enable_user_activity_logging parameter to false in the database parameter group. https://docs.aws.amazon.com/redshift/latest/mgmt/db-auditing.html#db-auditing-enable-logging
Question
A company has an Amazon Redshift cluster with database audit logging enabled. A security audit shows that raw SQL statements that run against the Redshift cluster are being logged to an Amazon S3 bucket. The security team requires that authentication logs are generated for use in an intrusion detection system (IDS), but the security team does not require SQL queries. What should a database specialist do to remediate this issue?
Options
- ASet the use_fips_ssl parameter to true in the database parameter group.
- BTurn off the query monitoring rule in the Redshift cluster's workload management (WLM).
- CSet the enable_user_activity_logging parameter to false in the database parameter group.
- DDisable audit logging on the Redshift cluster.
How the community answered
(18 responses)- A11% (2)
- B6% (1)
- C78% (14)
- D6% (1)
Explanation
https://docs.aws.amazon.com/redshift/latest/mgmt/db-auditing.html#db-auditing-enable-logging
Topics
Community Discussion
No community discussion yet for this question.