Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam C2150-606 All Questions

View all questions & answers for the C2150-606 exam

Exam C2150-606 topic 1 question 23 discussion

Actual exam question from IBM's C2150-606
Question #: 23
Topic #: 1
[All C2150-606 Questions]

A Guardium policy has been configured with the following two rules:


A Guardium administrator is required to check for SQL statements from client IP 9.4.5.6 executed on object "TABLE1".
What domain(s) can the administrator create a report in to see the SQL?

  • A. Access
  • B. Policy Violations
  • C. Access and Access Policy
  • D. Access and Policy Violations
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
The Log full details action logs the full SQL string and exact timestamp for this request.
The Access domain consists of all monitored SQL requests.
Reference:
https://www-01.ibm.com/support/knowledgecenter/SSMPHH_9.5.0/com.ibm.guardium95.doc/protect/topics/rule_actions.html

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Sa123
4 years, 3 months ago
In Alert Per match Rule we have checked Rec. Value field: When marked, the actual construct causing the rule to be satisfied will be logged, and available in reports, in the SQL String attribute. For a policy violation only, if not marked, no SQL statements will be logged. Check the Rec. Vals. check box to indicate that when the rule action is triggered, the complete SQL statement causing that event will be logged and available in the policy violation report. If not marked, the SQL String attribute will be empty. So, the correct answer can be D
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...