CompTIA DataSys+ (DS0-001)Data and Database SecurityMedium
A company is preparing for a compliance audit that requires demonstrating accountability for all database activities, especially those involving sensitive customer data. The auditor will need to review who accessed what data, when, and from where. Which database security capability is crucial for meeting this requirement?
- AData Masking
- BDatabase Auditing
- CAccess Control Lists (ACLs)
- DEncryption at Rest
Show answer & explanationAnswer & explanation
Correct answer: B. Database Auditing
Database auditing involves recording and reviewing events that occur within the database system, such as user logins, object access, and data modifications. This provides the necessary accountability and detailed logs required for compliance audits.
Why the other options are wrong
- A. Data Masking obscures sensitive data but does not track user activities or provide an audit trail.
- C. ACLs define who can access what resources but do not record *when* or *how* those resources were accessed for auditing purposes.
- D. Encryption at Rest protects data confidentiality but does not record user actions or access attempts.
Database Auditing
The process of monitoring and recording database activities to track user actions, detect suspicious behavior, and ensure compliance with security policies.
- Generates an audit trail of database events.
- Essential for accountability, forensics, and compliance.
- Can track logins, data access, schema changes, and DML operations.
Memory trick: Accountability is having a detailed ledger of every database action.