Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam C2150-606 All Questions

View all questions & answers for the C2150-606 exam

Exam C2150-606 topic 1 question 47 discussion

Actual exam question from IBM's C2150-606
Question #: 47
Topic #: 1
[All C2150-606 Questions]

A Guardium administrator must configure real time policy alerts to be sent to a remote SIEM for every SQL statement run on a sensitive object. There is no requirement for the data to be viewed or reported on in the Guardium appliance.
Which policy action would achieve that task and store the least amount of data in the Guardium internal database?

  • A. Log Only
  • B. Alert Only
  • C. Alert Daily
  • D. Alert Per Match
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
Guardium Version 9 introduced a new policy rule action - ALERT ONLY.
This rule action will populate only the message tables and constructs. It will no longer populate Policy Violations tables. With this policy rule action logging Policy
Violations in IBM InfoSphere Guardium can be avoided.
Alert Only - action that will write to message and message_text tables. This action permits all policy violation notifications to be sent to a remote destination.
Designed to improve Guardium integration with other database security solutions.
Incorrect:
Not C: Alert Daily sends notifications only the first time the rule is matched each day.
Reference:
https://www-01.ibm.com/support/knowledgecenter/SSMPHH_9.5.0/com.ibm.guardium95.doc/protect/topics/rule_actions.html

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Wen
5 years, 2 months ago
Correct answer should be B
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...