SCP-500 Risk Assessment & Management 4

Question 1

In SolarWinds, a 'dependency' relationship between nodes is important for risk management because it:

Accepted Answer

Prevents false alerts when a parent device is down

Answer

Defining parent-child dependencies suppresses child alerts when the parent is offline, reducing alert noise and ensuring accurate risk assessment.

Question 2

An organization wants to prioritize remediation efforts across 500 discovered vulnerabilities. The BEST approach is to rank them by:

Accepted Answer

CVSS score combined with asset criticality

Answer

Combining CVSS severity with the business criticality of the affected asset provides a risk-prioritized remediation order.

Question 3

SolarWinds Server & Application Monitor (SAM) reduces operational risk by monitoring which layer that NPM alone cannot cover?

Accepted Answer

Application and service health on servers

Answer

SAM monitors processes, services, and application performance on servers, providing visibility beyond network-layer metrics.

Question 4

Which risk concept describes the probability that a threat will successfully exploit a vulnerability within a given time period?

Accepted Answer

Likelihood (or probability)

Answer

Likelihood quantifies how probable it is that a given threat will materialize and exploit a known vulnerability.

Question 5

When SolarWinds NCM detects that a device configuration has changed outside of a maintenance window, the recommended risk response is to:

Accepted Answer

Generate an alert and compare the running config against the approved baseline

Answer

Comparing the changed configuration to the approved baseline identifies unauthorized modifications so they can be reverted or approved.

SCP-500 - Solarwinds Certified Professional Practice Test