Stuart blogged about secure GUI monitoring. I wanted add that ever since XFree86 v4.3 (circa RHL9 timeframe) that you can secure against switching out of X to a text terminal via CTL-ALT-Fn.
Edit your /etc/X11/xorg.conf and add a ServerFlags section with the contents:
Section ServerFlags
# prevent the use of CTL-ALT-F1, etc
Option DontVTSwitch On
# prevent the use of CTL-ALT-BKSP
Option DontZap On
EndSection
The GL250 course has coverage of this.
