An IBM Security Access Manager V9.0 deployment at a customer has enabled audit.authz, audit.authn, audit.http for meeting auditing requirements and results in large volume of audit records and poses significant data management challenges to the client. The customer wants to exclude the audit events to certain static resources such as images.
What action should be taken to implement this?
To exclude audit events for certain static resources in IBM Security Access Manager, it's appropriate to define a Policy Object (POP) with the auditing for HTTP (audithttp) set to 'no' and attach this policy to the specific static resources. This way, the specific resources that do not need to be audited are excluded while maintaining auditing for other necessary resources.
The right answer is C https://www.ibm.com/docs/en/sva/9.0.3?topic=logging-disabling-resource-access-events