Software Inventories and Application Control GMON Practice Questions (Page 9)

Questions 41–43

1. 41foundation · easy

   Which of the following is a common output of software inventory analysis?

   • AA map of network connections between endpoints
   • BA report of user login times and durations
   • CA list of endpoints with outdated or vulnerable software versions
   • DA list of open ports on each endpoint
   Reveal Solution Discussion Select an answer first
2. 42expert · hard

   A company has a software inventory that shows a popular file-sharing application installed on many endpoints. The application is not on the approved software list, but it is widely used for business purposes. The security team wants to reduce the risk of data leakage. What is the most appropriate action?

   • AAssess the business need and either approve the application with appropriate security controls or provide a sanctioned alternative.
   • BUninstall the application from all endpoints.
   • CImmediately block the application using application control.
   • DIgnore the application because it is widely used.
   Reveal Solution Discussion Select an answer first
3. 43application · medium

   A company wants to reduce the risk of malware execution on user workstations. The security team proposes an application control policy that allows only approved executables to run. Which additional principle should be applied to minimize the impact of a compromised application?

   • AGrant users administrative rights to install approved software themselves.
   • BRun user accounts with the least privilege necessary for their job functions.
   • CAllow all applications to run but monitor for suspicious behavior.
   • DUse a denylist of known malware signatures instead of an allowlist.
   Reveal Solution Discussion Select an answer first