You discover audit log entries that report attempts to log on to your computer. You need to be notified of all logon attempts that occur on your computer.<br /> What should you do?（）<br /> <img src="https://nimg.ppkao.com/2018-07/gelingxia/2018073116571172416.jpg?sign=f5ba946c8ee1f395eb468a5673d71410&t=62d3a52d" />..

第1题

[单选题] You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003. Confidential files are stored on a member server named TK1. The computer object for TK1 resides in an organizational unit (OU) named Confidential. A Group Policy object (GPO) named GPO1 is linked to the Confidential OU. To audit access to the confidential files, you enable auditing on all private folders on TK1. Several days later, you review the audit logs. You discover that auditing is not successful. You need to ensure that auditing occurs successfully. What should you do?（）

A、Start the System Event Notification Service (SENS) on TK1. B、Start the Error Reporting service on TK1. C、Modify the Default Domain Controllers GPO by selecting Success and Failure as the Audit Object Access setting. D、Modify GPO1 by selecting Success and Failure as the Audit Object Access setting.

点击查看答案

第2题

[] Consider the MySQL Enterprise Audit plugin, You add the following lines to the my.cnf configuration tile: [mysqld] Plugin-load=audit_log.so Audit-log=FORCE_PLUS_PERMANENT You attempt to start up the MySQL service and notice that it fails to start. Which two statements would explain why the service did not start?（） Consider the MySQL Enterprise Audit plugin, You add the following lines to the my.cnf configuration tile: [mysqld] Plugin-load=audit_log.so Audit-log=FORCE_PLUS_PERMANENT You attempt to start up the MySQL service and notice that it fails to start. Which two statements would explain why the service did not start?（）

A、A.FORCE_PLUS_PERMANENT is not valid for the audit-log option B、B.The audit_log.so library does not exist C、C.The audit_log.so library is in a location that is different from that defined by the plugin_dir option D、D.The audit plugin must be loaded dynamically by using the INSTALL PLUGIN command E、E.The audit log file does not exist in which to write audit events F、F.The audit_log.so library is not an executable file

点击查看答案

第3题

[单选题] Consider the MySQL Enterprise Audit plugin. On attempting to start the MySQL service after a crash, notice the following error: [ERROR] Plugin ‘audit_log’ init function returned error. In the audit log file, you notice the final entry: … What action should you take to fix the error and allow the service to start?（）

A、Re-install the audit plugin B、Execute the command FLUSH LOGS C、Execute the command SET GLOBAL audit_log_fiush= ON D、Move or rename the existing audit.log file

点击查看答案

第4题

[单选题] You wish to enable an audit policy for all database users, except SYS, SYSTEM, and SCOTT.You issue the following statements: SQL> AUDIT POLICY ORA_DATABASE_PARAMETER EXCEPT SYS;SQL> AUDIT POLICY ORA_DATABASE_PARAMETER EXCEPT SYSTEM; SQL> AUDIT POLICY ORA_DATABASE_PARAMETER EXCEPT SCOTT; For which database users is the audit policy now active?（）

A、All users except SYS B、All users except SCOTT C、All users except sys and SCOTT D、All users except sys, system, and SCOTT

点击查看答案

第5题

[单选题] Your network consists of a single Active Directory domain. You have a member server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). You need to track all authentication attempts on Server1. What should you do?（）

A、Enable auditing of logon event events in Server1’s local policy. B、Enable auditing of logon event events in the Default Domain Controller Policy. C、Enable auditing of account logon event events in Server1’s local policy. D、Enable auditing of account logon event events in the Default Domain Controller Policy.

点击查看答案

第6题

[单选题] he DBA is about to enable auditing on the Oracle database in an attempt to discover some suspicious activity. Audit trail information is stored in which of the following database object names?（）

A、SYS.SOURCE$ B、SYS.AUD$ C、DBA_SOURCE D、DBA_AUDIT_TRAIL

点击查看答案

第7题

[] Your network consists of a single Active Directory domain. You have a member server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). You need to track all authentication attempts on Server1. What should you do? （） Your network consists of a single Active Directory domain. You have a member server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). You need to track all authentication attempts on Server1. What should you do? （）

A、A. Enable auditing of logon event events in Server1’s local policy. B、B. Enable auditing of logon event events in the Default Domain Controller Policy. C、C. Enable auditing of account logon event events in Server1’s local policy. D、D. Enable auditing of account logon event events in the Default Domain Controller Policy.

点击查看答案

第8题

[单选题] You use Microsoft .NET Framework 4 to create a Windows Presentation Foundation (WPF) application. The application contains a composite user control that includes a TextBox control named txtInput. The user control will be hosted in a window and will have handlers for the text-changed event of txtInput. You need to ensure that the application meets the following requirements: Creates a text-changed event handler named Audit_TextChanged for the txtInput control. Executes Audit_TextChanged even when specific handlers mark the event as handled. Which code segment should you add to the constructor of the user control?（）

A、txtInput.TextChanged+=Audit_TextChanged; B、AddHandler(TextBox.TextChangedEvent, new RoutedEventHandler(Audit_TextChanged), true); C、EventManager.RegisterClassHandler(typeof(TextBox), TextBox.TextChangedEvent, new RoutedEventHandler(Audit_TextChanged), true); D、EventManager.RegisterClassHandler(typeof(TextBox), TextBox.TextChangedEvent, new RoutedEventHandler (Audit_TextChanged), false);

点击查看答案

第9题

[] You need to identify each help desk user who bypasses the new corporate security policy. What should you do？（） You need to identify each help desk user who bypasses the new corporate security policy. What should you do？（）

A、A.Configure Audit Special Logon and define Special Groups. B、B.Configure Audit Other Privilege Use Events and define Special Groups. C、C.Configure Audit Sensitive Privilege Use and configure auditing for the HelpDesk group. D、D.Configure Audit Object Access and modify the auditing settings for the HelpDesk group.

点击查看答案

请使用微信扫码支付