Configuration Monitoring GMON Practice Questions (Page 11)

Questions 51–54

1. 51foundation · easy

   Which integration is most beneficial for configuration monitoring?

   • AFeeding configuration change alerts into a SIEM for correlation with other security events
   • BSending configuration reports to the marketing department
   • CStoring configuration data in a spreadsheet without automated analysis
   • DDisabling configuration monitoring during business hours
   Reveal Solution Discussion Select an answer first
2. 52foundation · easy

   What is the purpose of configuration compliance assessment?

   • ATo automatically patch all non-compliant systems
   • BTo determine whether systems meet required security policies and standards
   • CTo provide a real-time view of network performance
   • DTo replace the need for regular vulnerability scanning
   Reveal Solution Discussion Select an answer first
4. 53expert · hard

   A security team has identified a critical configuration non-compliance on a server that is part of a high-availability cluster. Remediation requires a reboot, which will cause a brief service interruption. The team wants to minimize risk while addressing the issue. What is the best approach?

   • AApply the fix immediately without failover, accepting the service interruption.
   • BDelay remediation indefinitely to avoid any service interruption.
   • CSchedule the remediation during a maintenance window, fail over the workload to another node, and then apply the fix and reboot.
   • DApply the fix to the server while it is still serving traffic, without a reboot.
   Reveal Solution Discussion Select an answer first
5. 54application · medium

   An organization has a SIEM that ingests logs from various sources. The security team wants to integrate configuration monitoring alerts into the SIEM to correlate them with other security events. What is the most effective way to achieve this integration?

   • AUse a separate dashboard for configuration alerts and do not integrate with the SIEM.
   • BConfigure the configuration monitoring tool to send alerts to the SIEM via syslog or API.
   • CHave the SIEM periodically scan the configuration monitoring tool's database for new alerts.
   • DManually copy configuration alerts into the SIEM on a daily basis.
   Reveal Solution Discussion Select an answer first