4.4.1 - Monitoring Resources (Vulnerability Analysis)

What is the primary purpose of monitoring computing resources?

• To increase the number of servers

• To ensure optimal performance, security, and availability

• To eliminate the need for IT staff

• To reduce the cost of IT infrastructure

Which of the following is NOT a system-level metric to track?

• User satisfaction

• CPU usage

• Memory utilization

• Disk I/O

What tool is commonly used for application monitoring?

• Security information and event management (SIEM) systems

• Database performance monitoring tools

• Application performance monitoring (APM) solutions

• Network monitoring solutions

What does log aggregation entail?

• Generating alerts for security threats

• Scanning systems for vulnerabilities

• Collecting and consolidating log data into a centralized repository

• Archiving data for compliance purposes

What is the purpose of alert tuning?

• To archive alerts for future reference

• To optimize the detection of genuine threats while minimizing false positives

• To generate reports for decision-makers

• To increase the number of alerts

Which activity involves generating notifications when predefined conditions are detected?

• Reporting

• Archiving

• Alerting

• Quarantining

What is the goal of scanning in the context of monitoring?

• To archive data for historical reference

• To consolidate log data

• To generate alerts for potential threats

• To identify vulnerabilities, security weaknesses, or non-compliance with security policies

What does quarantining involve?

• Isolating or restricting access to compromised systems

• Reporting security posture to stakeholders

• Generating alerts for security incidents

• Consolidating log data

Which tool is NOT used for infrastructure monitoring?

• Application performance monitoring (APM) solutions

• Server monitoring tools

• Network monitoring solutions

• Database performance monitoring tools

What is the purpose of archiving in monitoring activities?

• To generate real-time alerts

• To tune alerts for better accuracy

• To store data, logs, or records for historical reference or compliance

• To scan for vulnerabilities