The SAVE_AMTcolumn in the ACCOUNTS table contains the balance details of customers in a bank. As part of the year-end tax and interest calculation process, all the rows in the table need to be accessed. The bank authorities want to track access to the rows containing balance amounts exceeding $200,000, and then send an alert message to the administrator. Which method would you suggest to the bank for achieving this task? A) implementing value-based auditing by using triggers B) implementing fine-grained auditing with audit condition and event handler C) performing standard database auditing to audit object privileges by setting the AUDIT_TRAIL parameter to EXTENDED D) performing standard database auditing to audit SQL statements with granularity level set to ACCESS
Answer: B Trigger不能对select语句进行审计,FGA细粒度审计能控制到列和行,包括select,update,delete和insert。题目中要求审计的同时发送警告信息,所以需要用到FGA中的handler_schema和handler_module选项。选B audit_trail有6个选项,其中: none:关闭审计 os:将审计结果直接保存在操作系统 db:将审计结果记录到数据库的SYS.AUD$中,但不包括SQL语句和SQL的绑定变量信息 db,extended:将审计结果记录到数据库的SYS.AUD$中,同时包含SQL语句和SQL的绑定变量信息 xml:将审计结果以xml的形式记录到操作系统中,但不包含SQL语句和SQL的绑定变量信息 xml,extended:将审计结果以xml的形式记录到操作系统中,同时包含SQL语句和SQL的绑定变量信息
|