3.4 Address Data Collector Security Risks APPDYNAMICS-ASSOCIATE-ADMINISTRATOR Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which activity is part of auditing Data Collector activity?

   • AReviewing logs for unauthorized access attempts
   • BConfiguring the Data Collector to collect more metrics
   • CRestarting the Data Collector service
   • DUpdating the Data Collector to the latest version
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company wants to detect if a Data Collector is being used to exfiltrate data. Which monitoring approach would be most effective?

   • AMonitor the number of active sessions on the collector.
   • BMonitor the volume of data being sent by the collector and alert on unusual spikes.
   • CMonitor the collector's log file size.
   • DMonitor the collector's CPU usage.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which action is part of hardening a Data Collector configuration?

   • AUsing default passwords for management interfaces
   • BDisabling unnecessary features
   • CEnabling all available features for maximum functionality
   • DAllowing access from any network
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A large enterprise has a Data Collector that monitors a legacy application. The collector uses a service account with domain admin privileges because the original administrator 'wanted to be safe'. The security team has mandated least privilege and wants to monitor for any unauthorized use of the collector. The application team is concerned that reducing permissions might break data collection. What should the administrator do?

   • AReduce permissions gradually and test each change in production.
   • BDisable the collector until the application team can verify it works with reduced permissions.
   • CKeep the domain admin account but enable logging to detect misuse.
   • DCreate a dedicated service account with only the permissions needed for data collection, and enable audit logging on the collector.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   An administrator is configuring a Data Collector that needs to authenticate to a backend system. The company policy requires that credentials are not stored in plain text and that any access to the credential store is logged. What should the administrator do?

   • AUse a shared service account with credentials stored in an unencrypted environment variable.
   • BEmbed the credentials in the Data Collector configuration file and rely on file system permissions.
   • CStore credentials in the Controller's credential store but disable logging to reduce performance overhead.
   • DStore the credentials in the AppDynamics Controller's encrypted credential store and enable audit logging for the credential store.
   Reveal Solution Discussion Select an answer first