A SIEM generated an alert after a third-party database administrator, who had recently been granted temporary access to the repository, accessed business-sensitive content in the database. The SIEM had generated similar alerts before this incident. Which of the following best explains the cause of the alert?

Step by Step Database activity monitoring (DAM) tracks user actions within databases and generates alerts for anomalous behavior, such as unauthorized access to sensitive content. Database field tokenization protects sensitive data but does not monitor access. Database decoy involves creating fake data to detect misuse but is unrelated to monitoring. Database integrity enforcement ensures data accuracy but does not generate access alerts.
Reference: CASP+ Exam Objectives 3.1 – Monitor and analyze logs for unauthorized access.