Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC Exam GCCC Topic 10 Question 68 Discussion

Actual exam question for GIAC's GCCC exam
Question #: 68
Topic #: 10
[All GCCC Questions]

An organization has implemented a control for Controlled Use of Administrative Privileges. They are collecting audit data for each login, logout, and location for the root account of their MySQL server, but they are unable to attribute each of these logins to a specific user. What action can they take to rectify this?

Show Suggested Answer Hide Answer
Suggested Answer: D

Contribute your Thoughts:

Aleisha
1 months ago
Ah, the age-old question of how to properly attribute logins to users. I bet the person who wrote this question has never actually worked with a real-world MySQL server. Option C all the way!
upvoted 0 times
...
Deeanna
1 months ago
Haha, Blacklisting client applications from running in privileged mode? That's like trying to put a bandaid on a broken leg. Not a real solution if you ask me.
upvoted 0 times
...
Nickolas
2 months ago
I don't know, B seems like a really complex solution. Why not just force user accounts to use 'sudo' for privileged use? That seems like the simplest and most straightforward option.
upvoted 0 times
Yuonne
13 days ago
C) Force user accounts to use 'sudo' for privileged use.
upvoted 0 times
...
Reuben
1 months ago
B) Turn on SELinux and user process accounting for the MySQL server.
upvoted 0 times
...
Tess
2 months ago
A) Force the root account to only be accessible from the system console.
upvoted 0 times
...
...
Ceola
2 months ago
Option A seems like the best solution to me. By forcing the root account to only be accessible from the system console, they can ensure that all logins are properly attributed to a specific user.
upvoted 0 times
Laine
1 months ago
B) Turn on SELinux and user process accounting for the MySQL server.
upvoted 0 times
...
Yaeko
2 months ago
A) Force the root account to only be accessible from the system console.
upvoted 0 times
...
...
Cletus
2 months ago
I see both points, but I think option A could also work. By forcing the root account to only be accessible from the system console, it limits who can login and helps with attribution.
upvoted 0 times
...
Terrilyn
3 months ago
I disagree, I believe option C is the way to go. Forcing user accounts to use 'sudo' for privileged use will help track who is accessing the root account.
upvoted 0 times
...
Miss
3 months ago
I think option B is the best choice. Turning on SELinux and user process accounting can help attribute logins to specific users.
upvoted 0 times
...

Save Cancel