Objective 2.07 Explain the Implications of Passwordless Authentication Options in APM and How They Affect SSO (e.g., SAML, Client Certificate, NTLM-end-user) 304 Practice Questions (Page 3)

Questions 11–12

1. 11foundation · easy

   An APM administrator is reviewing logs to determine why a user was denied access. Which type of data would be found in the APM logs to help with this analysis?

   • AEncrypted user passwords
   • BAccess policy decisions
   • CBackend database contents
   • DNetwork packet payloads
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   An organization uses APM with NTLM-end-user authentication for a legacy application. The security team wants to centralize authentication logs for auditing. They need to send APM authentication success and failure events to a remote SIEM. Which APM logging mechanism should the administrator configure to forward these events to the SIEM?

   • ASNMP traps to the SIEM
   • BTCP dump on the management interface
   • CHigh-Speed Logging (HSL) to a remote syslog server
   • DLocal logging to /var/log/apm
   Reveal Solution Discussion Select an answer first