MongoDB Security Access Control FAQ

16. Which of the following are categories of operations that MongoDB’s auditing system will record by default?

Check all that apply:
a. Schema (DDL)
b. Replica Set and Sharded Cluster
c. Authentication & Authorization
d. CRUD Operations (DML)

Answer: All of the following are categories of operations that MongoDB’s auditing system will record by default:

Schema (DDL)
Replica Set and Sharded Cluster
Authentication & Authorization

CRUD Operations (DML) are not audited by default by MongoDB. This is because there is a significant performance loss when CRUD is audited.

17. Which of the following are DDL action types supported by MongoDB’s auditing system?

Check all that apply:
a. createDatabase
b. createIndex
c. dropCollection
d. createDocument
e. shutdown

Ans:
All of the following are DDL action types supported by MongoDB’s auditing system:

• createDatabase
• createIndex
• dropCollection

The following are not DDL action types supported by MongoDB’s auditing system:

• createDocument

This is not a valid action type.

• shutdown

This is a valid action type, but is not an action type for a DDL operation.