A contractor has been hired by you company to do some application-specific tuning. You are the
administrator of the server that the contractor will be working on. You decide to enable Oracle
Solaris Auditing. How will auditing help prevent misuse of the server?
A.
prevents attempts to bypass the protection mechanisms
B.
stops unauthorized activity
C.
acts as a deterrent
D.
prevents misuse
Explanation:
The audit service makes the following possible:
Monitoring security-relevant events that take place on the host
Recording the events in a network-wide audit trail
Detecting misuse or unauthorized activity
Reviewing patterns of access and the access histories of individuals and objects
Discovering attempts to bypass the protection mechanisms
Discovering extended use of privilege that occurs when a user changes identity
Incorrect:Not A: auditing does not prevent attempts to bypass the protection mechanisms, it just discovers
them.
C
C
Auditing helps to detect potential security breaches by revealing suspicious or abnormal
patterns of system usage. Auditing also provides a means to trace suspect actions back to
a particular user, thus serving as a deterrent. Users who know that their activities are being
audited are less likely to attempt malicious activities.