3.6 Manage Database Credentials and Security APPDYNAMICS-ASSOCIATE-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A new administrator is learning about how AppDynamics handles database credentials. The administrator asks whether credentials are stored in a way that is accessible to anyone with database access to the Controller's underlying database. What is the correct answer?

   • AYes, but only if the user has both database access and the 'Credential Management' role in AppDynamics.
   • BNo, credentials are encrypted at rest and cannot be read as plaintext even with direct database access.
   • CNo, credentials are stored on the collector agent and are never written to the Controller database.
   • DYes, credentials are stored in plaintext in the Controller database and can be read by anyone with database access.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   How does AppDynamics support audit trails for database credential management?

   • AIt logs all actions related to credential creation, modification, and deletion.
   • BIt only logs credential access, not modifications.
   • CIt stores credentials in a separate audit database that is not encrypted.
   • DIt prevents any changes to credentials once they are created.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which practice is a recommended security best practice for database credentials used by AppDynamics?

   • ACreate a dedicated monitoring account with the minimum privileges required for data collection.
   • BStore credentials in plaintext in a shared spreadsheet for team access.
   • CShare the same credentials across all database collectors to simplify management.
   • DUse the database administrator account to ensure full access for monitoring.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A monitoring team lead needs to rotate the password for a SQL Server service account used by a database collector. The team lead has the 'Database Collector Admin' role but not the 'Account Management' role. After updating the password in the database, the team lead attempts to update the credential in the Controller but cannot find the option to modify it. What is the most likely reason?

   • AThe team lead lacks the required RBAC permission to manage credentials, which is separate from the permission to configure collectors.
   • BThe team lead must first delete the existing collector and recreate it with the new password, as credentials cannot be updated in place.
   • CThe credential was created by another user and is locked to prevent modifications by anyone except the original creator.
   • DThe Controller requires the database password to be changed in the database first, and the UI option only appears after a successful connection test.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A database administrator is leaving the company, and the monitoring team needs to ensure that the credentials they managed are no longer accessible to the departing administrator. The credentials are used by several active database collectors. What should the monitoring team do first?

   • AChange the passwords of all monitored databases to ensure the departing administrator cannot connect directly.
   • BDelete all database credentials and recreate them under a new administrator's name.
   • CRemove the departing administrator's user account and all associated RBAC role assignments.
   • DDisable the database collectors temporarily until a new administrator is assigned.
   Reveal Solution Discussion Select an answer first