CMO System Configuration & Setup 5 — Questions and Answers
Question 1: What action should a Mobilyze operator take when a configuration change causes unexpected system behavior?
- Continue operating and monitor the situation
- Roll back to the previous configuration backup (Correct answer)
- Reboot the system repeatedly until the issue resolves
- Delete all configuration files and start fresh
Correct answer: Roll back to the previous configuration backup
Rolling back to a previous configuration backup is the safest way to restore normal operation after an unsuccessful configuration change.
Question 2: Which type of SSL/TLS certificate should be used on a Mobilyze system to validate its identity to connecting clients?
- Self-signed certificate
- CA-signed (Certificate Authority) certificate (Correct answer)
- Expired certificate
- Wildcard domain certificate for a different domain
Correct answer: CA-signed (Certificate Authority) certificate
A CA-signed certificate is issued by a trusted authority and validates the system's identity to clients without requiring a security exception.
Question 3: During Mobilyze system configuration, an operator sets the session timeout to 15 minutes. What security risk does this address?
- Unauthorized firmware modification
- Unattended logged-in sessions being exploited (Correct answer)
- Excessive network bandwidth consumption
- Incorrect time zone settings
Correct answer: Unattended logged-in sessions being exploited
A session timeout automatically logs out inactive users, preventing unauthorized access through unattended, logged-in sessions.
Question 4: A Mobilyze installation requires integration with an LDAP directory for user authentication. What information is typically required to configure this connection?
- The MAC address of the directory server
- Server address, port, base DN, and bind credentials (Correct answer)
- The directory server's subnet mask only
- Only the server's IP address
Correct answer: Server address, port, base DN, and bind credentials
LDAP integration requires the server address, port (typically 389 or 636), base DN, and bind credentials to query the directory.
Question 5: What is the recommended approach when multiple administrators need to make configuration changes to a Mobilyze system simultaneously?
- Share a single admin account for simplicity
- Create individual named accounts with appropriate roles (Correct answer)
- Use the guest account with elevated privileges
- Disable authentication temporarily during the changes
Correct answer: Create individual named accounts with appropriate roles
Individual named accounts with role-based permissions maintain accountability and create a clear audit trail for each administrator's actions.
Question 6: Which Mobilyze configuration setting controls how long system event logs are retained before being automatically deleted?
- Backup interval
- Log retention policy (Correct answer)
- Session timeout
- Audit frequency
Correct answer: Log retention policy
The log retention policy defines the duration that system event logs are stored before automatic deletion, balancing storage and compliance requirements.
Question 7: After completing the initial Mobilyze system configuration, what is the best practice before connecting the unit to the production network?
- Immediately deploy to production to test under real conditions
- Conduct a configuration review and functional test in an isolated environment (Correct answer)
- Share the configuration file with all team members via email
- Disable all security features to simplify initial connectivity
Correct answer: Conduct a configuration review and functional test in an isolated environment
Reviewing and testing the configuration in an isolated environment ensures correctness before exposing the system to the production network.
CMO System Configuration & Setup 5
What action should a Mobilyze operator take when a configuration change causes unexpected system behavior?