3.4 Address Data Collector Security Risks APPDYNAMICS-ASSOCIATE-ADMINISTRATOR Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is a key best practice for managing credentials used by Data Collectors?

   • AAvoid changing credentials regularly
   • BUse the same credentials for all systems
   • CEmbed credentials directly in the Data Collector configuration
   • DRestrict access to credentials to only authorized personnel
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   An organization wants to detect potential security incidents involving Data Collectors, such as unauthorized access attempts or unusual data access patterns. Which approach should the administrator implement?

   • ARely on the application's own logs and do not configure Data Collector logging.
   • BEnable detailed logging for Data Collector activity and integrate the logs with a SIEM system for alerting.
   • CDisable logging to prevent attackers from seeing what the collector does.
   • DOnly log errors and ignore successful access attempts.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is a recommended hardening measure for Data Collectors?

   • AExpose the Data Collector to the internet for remote monitoring
   • BUse the same configuration for all environments
   • CRestrict network exposure to only necessary hosts
   • DDisable security patches to avoid downtime
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A company is migrating its Data Collectors to a new environment. The current collectors use hardcoded credentials in configuration files. The security team requires that credentials be stored securely and that access to them be logged. The migration must be completed with minimal downtime. What is the best approach?

   • AKeep the hardcoded credentials for now and plan to migrate later.
   • BUse the Controller's encrypted credential store and migrate collectors one at a time, verifying each before moving to the next.
   • CMigrate all collectors at once to save time, using the encrypted store.
   • DStore credentials in a plain text file on the new servers.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A security audit reveals that a Data Collector is running an outdated version with known vulnerabilities. The collector is also configured to accept connections on a non-standard port. What should the administrator do to address these findings?

   • AIgnore the findings because the collector is internal.
   • BOnly change the port to a non-standard one to hide the collector.
   • CDisable the collector until a patch is available.
   • DApply the latest security patches and change the port to a standard, approved port.
   Reveal Solution Discussion Select an answer first