Multiple choice

When is the use of fine-grained auditing beneficial?

  1. Unaudited access should be allowed to the CONTACT_ ADDRESS column of the CUSTOMER table from within the organization, but any access to the CONTACT_ADDRESS column occurring via the Internet should be tracked

  2. The Human Resources Administrator should be alerted every time someone accesses an executive's salary in the EMPLOYEE table

  3. Comparison between the before and after values of each update of the PRICE column of the PRODUCT table should be facilitated

  4. All users who updated the CUSTOMER table on a specific date should be identifiable

  5. All accesses of the EMPLOYEE table should be tracked

Reveal answer Fill a bubble to check yourself
A,B Correct answer
Explanation

Fine-grained auditing allows conditional audit policies based on specific column access or access conditions. Option A correctly uses FGA to track internet-based access to sensitive customer address data while allowing internal access. Option B demonstrates FGA's alert capability for specific high-value columns like executive salaries. Option C describes standard value-based auditing using triggers, not FGA. Option D and E describe standard table-level auditing which doesn't require FGA's granularity.