exam questions

Exam CCSP All Questions

View all questions & answers for the CCSP exam

Exam CCSP topic 1 question 487 discussion

Actual exam question from ISC's CCSP
Question #: 487
Topic #: 1
[All CCSP Questions]

Database activity monitoring (DAM) can be:

  • A. Host-based or network-based
  • B. Server-based or client-based
  • C. Used in the place of encryption
  • D. Used in place of data masking
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
We don't use DAM in place of encryption or masking; DAM augments these options without replacing them. We don't usually think of the database interaction as client-server, so A is the best answer.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
MaciekMT
1 month, 3 weeks ago
Selected Answer: A
Database Activity Monitoring (DAM) is a security technology used to track and analyze database access and activities to detect unauthorized or anomalous behavior. DAM can be implemented as: Host-based DAM → Monitors database activity directly on the server using agents. Network-based DAM → Monitors database traffic at the network level using network sniffing techniques. Why Not the Others? B. Server-based or client-based → DAM focuses on database monitoring, not distinguishing between server-side vs. client-side security. C. Used in the place of encryption → Encryption protects data confidentiality, whereas DAM monitors database activity—they serve different purposes. D. Used in place of data masking → Data masking hides sensitive data, while DAM detects and logs database interactions—they complement each other but are not interchangeable.
upvoted 1 times
...
Pika26
4 months, 4 weeks ago
Selected Answer: A
A: Host-based or network-based
upvoted 1 times
...
Banzaaai
2 years ago
why not D ?
upvoted 1 times
Bill_nye_russian_guy
1 year, 10 months ago
uhhhh....Database activity monitoring is done by combining several techniques such as network sniffing, memory scraping and reading system tables and database audit logs. So that means it can be network based or host based? why would it be masking?
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago