Host OS Monitoring GCTD Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is a common way to integrate host OS monitoring with cloud-native monitoring services?

   • AManually review VM logs through the cloud provider's support portal.
   • BInstall a monitoring agent on the VM that sends metrics and logs to the cloud monitoring service.
   • CUse the cloud provider's hypervisor logs to monitor guest OS activity.
   • DConfigure the VM to send all logs to a public email address.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the purpose of configuring alerts for host OS security incidents?

   • ATo ensure that the cloud provider patches the host OS.
   • BTo notify security personnel in a timely manner so they can investigate and respond.
   • CTo replace the need for regular security audits.
   • DTo automatically block all network traffic to the host.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A company's FIM solution monitors critical system files, but it generates a high volume of alerts during legitimate software updates. The security team wants to reduce alert noise without losing visibility into unauthorized changes. Which approach is most effective?

   • ADisable FIM monitoring during all software updates
   • BCreate a maintenance window during which FIM alerts are suppressed, and automatically update the baseline after the window
   • CRemove all system files from FIM monitoring
   • DIncrease the alert threshold to only report changes to files larger than 1 MB
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company uses AWS CloudWatch for monitoring its EC2 instances. They want to centralize host OS logs (e.g., /var/log/auth.log) and create alerts for suspicious activities. Which solution best integrates with CloudWatch?

   • AManually upload log files to an S3 bucket and use Athena to query them.
   • BConfigure VPC Flow Logs to capture OS logs.
   • CInstall the CloudWatch agent on the EC2 instances to collect and send logs to CloudWatch Logs.
   • DUse AWS CloudTrail to capture OS-level logs.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the primary function of a host-based intrusion detection system (HIDS)?

   • ATo replace the need for antivirus software.
   • BTo monitor activity on a single host to detect signs of intrusion or malicious behavior.
   • CTo monitor network traffic across the entire cloud environment.
   • DTo block all incoming network traffic to the host.
   Reveal Solution Discussion Select an answer first