Configuration Monitoring GMON Practice Questions (Page 10)

Questions 46–50

1. 46application · medium

   A security manager wants to explain to executives why configuration monitoring is important for the organization's security posture. Which statement best describes the role of configuration monitoring in continuous security monitoring?

   • AIt helps detect unauthorized changes that could weaken security controls or indicate compromise.
   • BIt replaces the need for vulnerability scanning and patch management.
   • CIt ensures that all systems are always fully patched and up to date.
   • DIt provides real-time protection against malware and intrusions.
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   Which source is most appropriate for establishing a secure configuration baseline?

   • AIndustry hardening guides and vendor security recommendations
   • BThe default configuration provided by the software vendor
   • CA configuration that maximizes system performance
   • DThe configuration used on the administrator's personal computer
   Reveal Solution Discussion Select an answer first
4. 48expert · hard

   A security team is establishing a configuration baseline for a new server that will host a public-facing web application. The application team requires certain settings that conflict with the organization's security baseline. How should the team proceed?

   • AAlways follow the security baseline, regardless of application requirements.
   • BDocument the conflict, assess the risk of deviating from the baseline, and if the risk is acceptable, create a documented exception with compensating controls.
   • CAlways follow the application team's requirements, ignoring the security baseline.
   • DAsk the application team to change their requirements to match the baseline.
   Reveal Solution Discussion Select an answer first
5. 49foundation · easy

   What is a configuration baseline?

   • AA list of all software vulnerabilities in a system
   • BA backup of system files used for disaster recovery
   • CA documented set of secure configuration settings for a system or application
   • DA log of all configuration changes made over time
   Reveal Solution Discussion Select an answer first
6. 50application · medium

   A security team wants to ensure that configuration monitoring is part of the incident response process. When a configuration change is detected that may be related to an incident, what should happen?

   • AThe alert should be deleted to avoid cluttering the incident response process.
   • BThe alert should be stored in a separate log and reviewed only after the incident is resolved.
   • CThe configuration monitoring alert should be automatically forwarded to the incident response team and included in the incident ticket.
   • DThe alert should be sent only to the system administrator, not the incident response team.
   Reveal Solution Discussion Select an answer first