3.4 Address Data Collector Security Risks APPDYNAMICS-ASSOCIATE-ADMINISTRATOR Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A financial services company is deploying AppDynamics Data Collectors to capture database query parameters for a critical application. The security team requires that all data transmitted from the application to the Controller be encrypted, and that the Data Collector only has permission to read the specific database tables it needs. Which combination of actions should the administrator take?

   • AConfigure the Data Collector to use a service account with full database permissions and enable SSL for the Controller.
   • BEnable HTTPS for the Controller connection and configure the Data Collector with a database account that has SELECT only on the required tables.
   • CEnable TLS for the database connection and grant the Data Collector db_owner role on the database.
   • DUse HTTP for the Controller connection and restrict the Data Collector to a read-only database account.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which of the following is a common security risk associated with AppDynamics Data Collectors?

   • AHigh CPU usage during peak loads
   • BExcessive logging of system metrics
   • CUnauthorized access to collected data
   • DIncorrect configuration of transaction thresholds
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A Data Collector needs to access a database to collect transaction data. The database administrator wants to minimize the risk of data exposure if the collector is compromised. What is the best practice for the database account used by the collector?

   • AUse a shared admin account for simplicity.
   • BGrant the account db_owner role to ensure it can read all data.
   • CUse the application's service account with full database access.
   • DCreate a dedicated account with SELECT permissions only on the specific tables required.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A multinational company must collect data from an application hosted in a region with strict data protection laws. The Data Collector must send data to a Controller in another region. The network team has proposed using a VPN, but the compliance team insists on encryption in transit. The administrator must ensure that data is encrypted end-to-end and that the collector is not exposed to the public internet. What should the administrator do?

   • ADisable encryption to improve performance and use network segmentation.
   • BUse HTTP and rely on the VPN for encryption.
   • CUse the VPN as the only encryption method and keep the collector on a public IP.
   • DConfigure the Data Collector to use HTTPS to the Controller and place the collector on a private network with no public IP.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What does the principle of least privilege mean for Data Collectors?

   • AGrant permissions only after a security audit
   • BGrant permissions based on the user's role, not the Data Collector's function
   • CGrant only the minimum permissions necessary to perform their function
   • DGrant all permissions to ensure they work correctly
   Reveal Solution Discussion Select an answer first