CompTIA Cloud+ Practice Test

What configuration is required for monitoring database activity without agents on a public IaaS database server?

1. Configure the agent configuration file to log to the syslog server

2. Configure sniffing mode on database traffic

3. Implement built-in database tracking functionality

4. Implement database encryption and secure copy to the NAS

The correct answer is: Configure sniffing mode on database traffic

Monitoring database activity without the use of agents on a public Infrastructure as a Service (IaaS) database server can be effectively achieved through sniffing mode. When you configure sniffing mode, network traffic destined for and from the database can be captured for analysis. This approach allows for observation of database activity in real-time without the need to install any additional agents on the server itself. Utilizing sniffing mode provides a non-intrusive means of monitoring, as it captures the network packets that contain database transactions and other relevant activities. It can help in identifying potential issues, such as performance bottlenecks or unauthorized access, by analyzing the captured traffic. The other choices do not directly serve the purpose of monitoring database activity in the same effective or non-invasive manner as sniffing mode does. For example, while logging to a syslog server could be useful for general logging purposes, it typically requires agent installation and may not capture detailed database activity. Built-in database tracking functionalities, while useful, are often limited to what the database natively supports and might not provide comprehensive monitoring capabilities without agent interference. Database encryption and secure copy to NAS primarily focus on data security rather than activity monitoring. Thus, sniffing mode is the most suitable configuration for this specific need.