6.1 Establish Standards and Policies APPDYNAMICS-ASSOCIATE-ADMINISTRATOR Practice Questions (Page 2)

Questions 6–9

1. 6foundation · easy

   What is the primary purpose of an access policy in AppDynamics?

   • ATo provide step-by-step instructions for creating a new user
   • BTo list all users and their roles in the system
   • CTo specify the exact password length and character requirements
   • DTo define who can access the system and under what conditions
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A software company is adopting AppDynamics and wants to define rules for who can create API clients that access the Controller. The development lead wants to allow all developers to create clients, while the security officer wants to restrict this to a small group. What should the administrator do to resolve this conflict?

   • ADisable API client creation entirely and require all integrations to use a single shared client.
   • BCreate a policy that allows developers to create API clients but requires them to use a specific naming convention.
   • CAllow all developers to create API clients and document that the audit log will track their usage.
   • DDocument a policy that grants API-client creation rights only to a designated 'API Admin' role and require a request ticket for each new client.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A financial services company is deploying AppDynamics and needs to document how administrators will be granted access. The security team requires that every access request be tied to a business justification, approved by a manager, and reviewed quarterly. Which approach should the administrator take to satisfy this requirement?

   • AConfigure the AppDynamics Controller to automatically expire all user accounts every 90 days.
   • BAssign all administrators to the built-in Administrator role and rely on the audit log to track their activity.
   • CCreate a shared service account for the operations team and rotate its password monthly.
   • DCreate a written access-control standard that defines the request, approval, and review workflow, and publish it to the operations team.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A healthcare organization uses AppDynamics to monitor patient-facing applications. The compliance officer mandates that only users with a specific job function may view performance data containing patient information. The administrator needs to define a policy that enforces this requirement. What should the administrator do?

   • AConfigure the Controller to mask all metric names that contain the word 'patient'.
   • BDocument a data-access policy that restricts access to performance data to users in the 'Healthcare Monitor' role and require role assignment to be approved by the data owner.
   • CGrant all users read-only access to the Controller and rely on the audit log to detect unauthorized viewing.
   • DEnable two-factor authentication for all AppDynamics users to secure the Controller.
   Reveal Solution Discussion Select an answer first