3.4 Address Data Collector Security Risks APPDYNAMICS-ASSOCIATE-ADMINISTRATOR Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A Data Collector is installed on a server that also hosts other applications. The server is behind a firewall, but the security team is concerned about the collector's exposure. The administrator must harden the collector without affecting the other applications. What is the best approach?

   • AUse the same service account as the other applications to simplify management.
   • BRun the Data Collector as a separate service with its own restricted account, and configure the firewall to allow only necessary inbound traffic to the collector.
   • CInstall the collector on a different server to avoid affecting other applications.
   • DDisable the firewall to ensure the collector can communicate freely.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   An organization has multiple Data Collectors across different environments. The security team wants to centralize monitoring of Data Collector activity to detect anomalies, but the network team is concerned about the overhead of sending logs over the network. The compliance team requires that logs be encrypted in transit. What should the administrator do?

   • AConfigure Data Collectors to send logs to a central SIEM using TLS, and filter logs to include only security-relevant events.
   • BStore logs locally and only send alerts to the SIEM.
   • CDisable logging on collectors to reduce network traffic.
   • DSend all logs in plain text to reduce overhead.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which security risk involves an attacker sending malicious input to a Data Collector to execute unintended commands?

   • APrivilege escalation
   • BInjection attack
   • CDenial of service
   • DMan-in-the-middle attack
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary purpose of using TLS for Data Collector communication?

   • ATo authenticate users accessing the Controller
   • BTo encrypt data in transit
   • CTo filter malicious traffic
   • DTo compress data for faster transmission
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A Data Collector is sending sensitive data to the Controller over HTTP. The security team has identified this as a risk. What is the most direct mitigation?

   • AUse a different port for HTTP.
   • BDisable the Data Collector during non-business hours.
   • CChange the Controller connection to use HTTPS.
   • DRestrict the Data Collector's IP address to the Controller's IP.
   Reveal Solution Discussion Select an answer first