Configuration Monitoring GMON Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A security team is evaluating configuration monitoring tools. They need a tool that can monitor configurations across multiple operating systems and provide a centralized dashboard. Which type of tool should they consider?

   • AA security information and event management (SIEM) system that collects logs.
   • BA vulnerability scanner that checks for known vulnerabilities.
   • CA configuration management database (CMDB) with built-in monitoring capabilities.
   • DA host-based intrusion detection system (HIDS) that monitors file integrity.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A configuration monitoring report shows that 15% of servers are non-compliant with the company's password policy. The security team wants to remediate this issue. What is the most effective first step?

   • APrioritize remediation based on the risk level of the affected systems and the severity of the non-compliance.
   • BIgnore the report because only 15% of servers are affected.
   • CImmediately change the password policy to match the current configuration.
   • DSend a mass email to all users asking them to change their passwords.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is the primary purpose of configuration monitoring in a continuous security monitoring program?

   • ATo detect and alert on unauthorized or unintended changes to system configurations
   • BTo enforce real-time blocking of all malicious network traffic
   • CTo provide a one-time assessment of system hardening at deployment
   • DTo replace the need for vulnerability scanning by continuously patching systems
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is the first step in remediating a non-compliant configuration?

   • AIgnoring the issue until the next audit
   • BDeleting the system from the network
   • CImmediately applying the baseline configuration
   • DInvestigating the cause and impact of the non-compliance
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is a key feature of automated configuration monitoring tools?

   • ABlocking all configuration changes automatically
   • BReplacing the need for security policies
   • CContinuous collection and comparison of configuration data against baselines
   • DManual review of configuration settings by administrators
   Reveal Solution Discussion Select an answer first