Application Security — Dynatrace Docs

What security feature in Dynatrace works independently of monitoring modes?

Dynatrace Security Posture Management (SPM)

On Linux hosts, how is public internet exposure detected if no other information is available?

Via eBPF

Full-Stack Monitoring mode

A recommended mode providing complete application performance monitoring, code-level visibility, deep process monitoring, and Infrastructure Monitoring (including PaaS platforms).

What does the Dynatrace Security Score (DSS) equal in Infrastructure Monitoring mode?

The CVSS base score

The values for public internet exposure and reachable data assets are set to __ if related hosts run in Infrastructure Monitoring mode and lack sufficient data.

Not available

What specific action must be taken to use Application Security in Discovery mode?

Enable code-module injection

Discovery mode

A lightweight monitoring mode that provides basic monitoring, including system metrics and third-party vulnerability detection.

In Discovery mode, the vulnerability's risk value cannot be __ because topology information is missing.

reevaluated

What are the two potential states detected for public internet exposure via eBPF on Linux hosts?

Public network and Not detected

Under which licensing model is Discovery mode exclusively available?

Dynatrace Platform Subscription (DPS)

In Infrastructure Monitoring mode, vulnerable __ information is supported.

function

A full assessment of vulnerabilities can only be performed if all related hosts are under __ Monitoring mode.

Full-Stack

What three specific system metrics are provided in both Discovery and Infrastructure Monitoring modes?

CPU usage, memory usage, and disk usage

Dynatrace Intelligence cannot adapt the __ in Infrastructure or Discovery modes.

Dynatrace Security Score (DSS)

If at least one related host is in Full-Stack mode and a vulnerability is exposed, what features are displayed?

Public internet exposure and reachable data assets

The component responsible for sending data to examine exposure or sensitive data affected by vulnerabilities.

OneAgent

Does Discovery mode support Runtime Application Protection?

Yes

In Infrastructure Monitoring mode, the risk value stays the same as the base score because __ information is extracted from the environment only in Full-Stack mode.

topology

Public internet exposure states detected via eBPF do NOT influence the __.

Dynatrace Security Score

Common Vulnerability Scoring System (referenced as the base score for the DSS in limited monitoring modes).

CVSS

Infrastructure Monitoring mode provides less complete monitoring than Full-Stack mode because it lacks __ such as reachable data assets.

environmental information

Which monitoring mode is described as 'Recommended' for complete visibility?

Full-Stack Monitoring mode

If related hosts run in Discovery mode, the values for public internet exposure and reachable data assets are set to __.

Not available

A score calculated by Dynatrace that is adapted in Full-Stack mode but remains equivalent to the CVSS base score in Infrastructure or Discovery modes.

Dynatrace Security Score (DSS)

Dynatrace Security Posture Management works __ of monitoring modes.

independently