3.4 Address Data Collector Security Risks APPDYNAMICS-ASSOCIATE-ADMINISTRATOR Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Why is it important to apply least privilege to Data Collectors?

   • ATo improve data collection performance
   • BTo simplify configuration management
   • CTo reduce the potential attack surface
   • DTo ensure compliance with data retention policies
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the purpose of monitoring and auditing Data Collector activity?

   • ATo improve the performance of the Data Collector
   • BTo automate the deployment of Data Collectors
   • CTo reduce the amount of data collected
   • DTo detect and respond to suspicious activities
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company has deployed a Data Collector on a VM that is accessible from the internet. The security team is concerned about unauthorized access and wants to minimize the attack surface. Which action should the administrator take?

   • ADisable logging to reduce the chance of log injection attacks.
   • BKeep the Data Collector accessible from all IP addresses to ensure availability.
   • CEnable all Data Collector features to ensure full functionality.
   • DRestrict the Data Collector's network access to only the required ports and IP addresses, and disable any unused features.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A Data Collector is installed on a server that is accessible from the internet. The administrator wants to reduce the risk of unauthorized access. Which action is most effective?

   • AUse a weaker encryption protocol to improve performance.
   • BRestrict the collector's inbound traffic to only the necessary ports and source IP addresses.
   • CDisable the collector's logging to reduce the attack surface.
   • DChange the collector's port to a random high number.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A Data Collector is configured to access a file share to read log files. The collector runs with a service account that has full control over the entire file server. The security team wants to reduce the risk of data exposure if the collector is compromised, but the operations team is concerned about the collector's ability to read new log files that are created dynamically. What should the administrator do?

   • AKeep full control but restrict the collector's network access.
   • BUse an administrator account to avoid permission issues.
   • CGrant the service account read permissions only on the specific log folder and its subfolders, and ensure the account has traverse folder permissions.
   • DGrant modify permissions on the entire file server to ensure new files are accessible.
   Reveal Solution Discussion Select an answer first