IBM C2090-463 Online Practice Questions and Exam Preparation

IBM C2090-463 Online Questions & Answers

• Question 71:

  What is the correct way to stop S-TAP that is managed by GIM?

  A. Uninstall S-TAP.
  B. Use kill -9 on S-TAP process.
  C. Comment S-TAP entry in /etc/inittab.
  D. Set STAP_ENABLED to "0" in GIM parameters.
  D. Set STAP_ENABLED to "0" in GIM parameters.

• Question 72:

  Before uninstalling A-TAP, which procedure must be done?

  A. K-TAP must be unloaded using guard_ktap_loader.
  B. A-TAP must be deactivated on all database instances.
  C. The Guardium group must be removed from the server.
  D. The sniffer must be stopped on the Guardium appliance.
  B. A-TAP must be deactivated on all database instances.

• Question 73:

  What is the correct way to stop a UNIX S-TAP that was installed with a non-GIM installer?

  A. Use the Stop S-TAP button in the S-TAP Control window.
  B. Find the S-TAP Process ID and terminate with kill -9 command.
  C. Comment the U-TAP section of /etc/inittab, followed by the init q command.
  D. Under the Modules parameter in the Central Manager, set STAP_ENABLED = 0 for the appropriate S-TAP.
  C. Comment the U-TAP section of /etc/inittab, followed by the init q command.

• Question 74:

  How should classification policy rules be defined in order to activate Luhn algorithm evaluation?

  A. The policy rule should begin with "guardium: //LUHN_ALG".
  B. The S-TAP ini file should have luhn_activated parameter set.
  C. The policy rule should begin with "guardium: //CREDIT_CARD".
  D. The Luhn algorithm checkbox next to the pattern box should be checked.
  C. The policy rule should begin with "guardium: //CREDIT_CARD".

• Question 75:

  With Guardium version 8.x "S-TAP for z" monitoring a single DB2 instance on z/OS, which statement is true?

  A. There is typically 1 started task running on z: ADHSPAGT = Agent
  B. There are typically 2 started tasks running on z: ADHCXXXX = Collector ADHSPSRV = Server
  C. There are typically 3 started tasks running on z: ADHMXXXX = Master ADHSPAGT = Agent ADHSPSRV = Server
  D. There are typically 4 started tasks running on z: ADHCXXXX = Collector ADHMXXXX = Master ADHSPAGT = Agent ADHSPSRV = Server
  D. There are typically 4 started tasks running on z: ADHCXXXX = Collector ADHMXXXX = Master ADHSPAGT = Agent ADHSPSRV = Server

• Question 76:

  What value must be provided for DB User to ensure that an exception rule will trigger on failed logins for a single user rather than for all users in a given time period.

  A. .
  B. ?
  C. %
  A. .

• Question 77:

  How does the database entitlement information get pulled into the Guardium appliance?

  A. DB Entitlement Reports use the LDAP Domain feature to create links between the LDAP data on the selected database with the internal data ofthe predefined entitlement reports.
  B. DB Entitlement Reports use the Custom Domain feature to create links between the external data on the selected database with the internaldata of the predefined entitlement reports.
  C. DB Entitlement Reports use the Access Domain feature to create links between the accessed data on the selected database with the internaldata of the predefined entitlement reports.
  D. DB Entitlement Reports use the Security Assessment Domain feature to create links between the user data on the selected database with theinternal data of the predefined entitlement reports.
  B. DB Entitlement Reports use the Custom Domain feature to create links between the external data on the selected database with the internaldata of the predefined entitlement reports.

• Question 78:

  Which Guardium appliance cannot be a standalone unit?

  A. S-TAP
  B. Collector
  C. Aggregator
  D. Central manager
  D. Central manager

• Question 79:

  How can you find the help documents within the Guardium GUI?

  A. by selecting the "about" link in the upper right hand of the screen
  B. by selecting the "?" to the right of the Portal Map icon
  C. by selecting the "tools-> help" from the admin console
  D. by selecting the magnifying glass icon in the upper right hand of the screen
  B. by selecting the "?" to the right of the Portal Map icon

• Question 80:

  Which action CANNOT take place as the result of a correlation alert?

  A. Send an Email alert.
  B. Trigger a Policy Violation.
  C. Block unauthorized access to sensitive data.
  D. Send audit data to a SIEM via Syslog or SNMP.
  C. Block unauthorized access to sensitive data.