What is the primary goal of configuration change detection?

To identify unauthorized or unintended modifications to system settings

To log all successful user logins to a system

To automatically revert all configuration changes to the baseline

To prevent users from changing their own passwords

Which tool category is specifically designed to monitor file integrity and configuration changes?

File Integrity Monitoring (FIM) tools

Network intrusion detection systems (NIDS)

A company is deploying a new application on a Linux server. The security team needs to establish a secure configuration baseline for the server. Which of the following is the FIRST step in this process?

Install the operating system and all necessary applications with default settings.

Enable all security features provided by the operating system.

Run a vulnerability scanner to identify known vulnerabilities in the installed software.

Identify the security requirements and applicable standards for the application and server.

Why is it important to integrate configuration monitoring with other security monitoring processes?

To ensure all configuration changes are automatically approved

To provide a more complete picture of security posture and enable coordinated response

To reduce the need for security policies

To eliminate the need for human analysts

What is the purpose of analyzing configuration monitoring data?

To automatically patch all systems

To identify security risks and anomalies that may indicate compromise or misconfiguration

To replace the need for incident response

To generate marketing reports for customers

GIAC Continuous Monitoring Certification

Domain 4Objective 1

Configuration Monitoring GMON Practice Questions (Page 7)

Part of the Configuration and Vulnerability Management domain, which makes up ~21% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–25 in this domain), expect 5–8 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

8concepts

Questions 31–35

31foundation · easy
What is the primary goal of configuration change detection?
Select an answer first
32foundation · easy
Which tool category is specifically designed to monitor file integrity and configuration changes?
Select an answer first
33application · medium
A company is deploying a new application on a Linux server. The security team needs to establish a secure configuration baseline for the server. Which of the following is the FIRST step in this process?
Select an answer first
34foundation · easy
Why is it important to integrate configuration monitoring with other security monitoring processes?
Select an answer first
35foundation · easy
What is the purpose of analyzing configuration monitoring data?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GMON

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMON” is a trademark of its owner, used for identification only.