1Z0-1104-25 Question 136
Select 3Your organization has a production database containing sensitive customer information. You want to identify specific columns holding sensitive data, mask that data for a test environment to maintain compliance, and continuously monitor user activities for suspicious actions. Which three OCI Data Safe functionalities should you leverage to achieve these goals?
- A
Security Assessment
- B
Activity Auditing
- C
Sensitive Data Discovery
- D
Data Masking
- E
User Assessment
Show answer and explanation
Correct answers: B, C, D
Explanation
To address the scenario, you need to identify sensitive data, mask it for testing, and track user activities. Sensitive Data Discovery locates sensitive information, Data Masking anonymizes that information in non-production scenarios, and Activity Auditing enables continuous monitoring of database actions. Refer to Oracle� OCI Data Safe documentation for further details on implementing these features.
- A. Incorrect.
Option 1: Security Assessment - INCORRECT. Security Assessment checks configuration, security controls, and database parameters for potential vulnerabilities but does not directly focus on identifying sensitive data, masking it, or continuously monitoring user activity.
- B. Correct.
Option 2: Activity Auditing - CORRECT. Activity Auditing helps you review database activities by capturing user events. It is essential for spotting suspicious or unauthorized usage patterns.
- C. Correct.
Option 3: Sensitive Data Discovery - CORRECT. Sensitive Data Discovery automatically identifies columns containing sensitive data. This is critical before masking or setting up compliance directives.
- D. Correct.
Option 4: Data Masking - CORRECT. Data Masking replaces sensitive data with fictitious but realistic data in non-production environments, protecting confidentiality while allowing realistic testing.
- E. Incorrect.
Option 5: User Assessment - INCORRECT. User Assessment examines user accounts for excessive privileges or unusual access settings. While beneficial for an overall security posture, it does not directly address the discovery, masking, or auditing requirements described in the scenario.