Device Monitoring GMON Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A company has a dynamic environment where new devices are frequently added and removed. The security team needs to maintain an accurate device inventory for monitoring. What is the most effective approach?

   • APerform a manual inventory review at the end of each month.
   • BRely on the CMDB which is updated by IT staff.
   • CMonitor only the devices that are in the initial inventory.
   • DUse automated discovery tools that continuously scan the network and update the inventory.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A monitoring team notices that a server's disk usage has exceeded 95% for the past hour. They have an alert configured for this threshold. What should they do next?

   • AIncrease the alert threshold to 98% to reduce false positives.
   • BImmediately reboot the server to clear temporary files.
   • CInvestigate the cause of the disk usage and take remediation actions such as archiving logs or expanding storage.
   • DDisable the alert until the disk usage returns to normal.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A security analyst is building a device inventory for a mid-sized company that has a mix of Windows, Linux, and macOS endpoints. The company has no existing inventory and needs a baseline that can be updated automatically. Which approach best meets the requirement?

   • ADeploy an agent-based asset discovery tool that reports to a central inventory database
   • BAsk each department to submit a list of their devices quarterly
   • CUse active network scanning to identify devices and manually record them in a spreadsheet
   • DCollect logs from the firewall and infer the device list from connection records
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which set of metrics is typically monitored as part of device health and performance monitoring?

   • ACPU, memory, disk, and network usage
   • BUser passwords, group memberships, and login times
   • CSoftware licenses, warranty dates, and purchase orders
   • DFirewall rules, ACLs, and routing tables
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company has a bring-your-own-device (BYOD) policy and needs to monitor which personal devices access corporate resources. The company wants to maintain visibility without installing agents on personal devices. Which approach is most appropriate?

   • AMonitor only the corporate Wi-Fi network logs
   • BRequire all personal devices to install a full endpoint agent
   • CBlock all personal devices from accessing corporate resources
   • DUse network access control (NAC) and mobile device management (MDM) enrollment for corporate resource access
   Reveal Solution Discussion Select an answer first