IBM C2090-463 Online Practice Questions and Exam Preparation

IBM C2090-463 Online Questions & Answers

• Question 81:

  What is the default policy of a new appliance?

  A. PCI policy
  B. SOX Policy
  C. allow all policy
  D. selective audit policy
  C. allow all policy

• Question 82:

  Which guard_tap.ini parameter should be used to set the virtual IP of a Microsoft SQL Server cluster environment?

  A. tap_ip
  B. sqlguard_ip
  C. alternate_ips
  D. connect_to_ip
  C. alternate_ips

• Question 83:

  To run grdapi commands users need to use the Command Line Interface (CLI) account. Access to the CLI account is required. Which statement is true?

  A. grdapi commands can only be run from the standard CLI user.
  B. Roles to the CLI accounts are given to users by the Admin account.
  C. The standard CLI user cannot run all of the grdapi commands because it doesn't have the appropriate roles.
  D. GUI users of the Guardium system have default access to run grdapi commands from the guardcli1,...,guardcli5 accounts.
  C. The standard CLI user cannot run all of the grdapi commands because it doesn't have the appropriate roles.

• Question 84:

  Which Main Entity CANNOT be used to display Application User?

  A. Object
  B. Full SQL
  C. Client/Server
  D. Access Period
  C. Client/Server

• Question 85:

  Which is the recommended datasource for use by Vulnerability Assessment?

  A. An administrator user credential with read-only access.
  B. A generic database user credential with read and write access.
  C. A datasource using default user accounts for the targeted database type.
  D. A datasource created using the gdmmonitor script specific for the targeted database type.
  D. A datasource created using the gdmmonitor script specific for the targeted database type.

• Question 86:

  Given the GrdAPI command: grdapi upload_custom_data tableName=DB2_COLUMN_PRIVS What does this command do?

  A. upload database entitlement information into the DB2_COLUMN_PRIVS table for use in the DB2 entitlement reports
  B. push Guardium audit information into the DB2 table DB2_COLUMN_PRIVS for use with the DB2 Unload command
  C. upload entitlement information into the Guardium central manager for reporting on the DB2_COLUMN_PRIVS entitlement report
  D. upload database entitlement information into S-TAP to block privilege users from accessing column level privileges within DB2
  A. upload database entitlement information into the DB2_COLUMN_PRIVS table for use in the DB2 entitlement reports

• Question 87:

  Which statement will create an inspection engine for an Oracle database on host 10.10.9.57?

  A. grdapi create_stap_inspection_engine stapHost=10.10.9.57 protocol=Sybase portMin=4200 portMax=4200 client=0.0.0.0/0.0.0.0 ktapDbPort=4200
  B. grdapi create_stap_inspection_engine stapHost=10.10.9.57 protocol=Oracle portMin=1521 portMax=1521 dbInstallDir=/usr/lib/oracle procName=/usr/lib/oracle/app/oracle/product/10.2.0/server/bin/oracle client=0.0.0.0/0.0.0.0 ktapDbPort=1521
  C. grdapi create_stap_inspection_engine stapHost=10.10.9.59 protocol=Oracle portMin=1521 portMax=1521 dbInstallDir=/usr/lib/oracle procName=/usr/lib/oracle/app/oracle/product/10.2.0/server/bin/oracle client=0.0.0.0/0.0.0.0 ktapDbPort=1521
  D. grdapi create_stap_inspection_engine stapHost=10.10.9.57 protocol=DB2 portMin=50001 portMax=50001 dbInstallDir=/home/db2inst2 procName=/home/db2inst2/sqllib/adm/db2sysc client=0.0.0.0/0.0.0.0 db2SharedMemAdjustment=20 db2SharedMemClientPosition=61440 db2SharedMemSize=131072 ktapDbPort=50001
  B. grdapi create_stap_inspection_engine stapHost=10.10.9.57 protocol=Oracle portMin=1521 portMax=1521 dbInstallDir=/usr/lib/oracle procName=/usr/lib/oracle/app/oracle/product/10.2.0/server/bin/oracle client=0.0.0.0/0.0.0.0 ktapDbPort=1521

• Question 88:

  What could cause all the S-TAPs on a particular collector to turn red (in S-TAP Control)?

  A. The GUI is down (port 8443 unavailable).
  B. The SSH daemon on appliance is down (port 22 unavailable).
  C. The GIM server on the appliance is down (port 8081 unavailable).
  D. The inspection core was stopped (ports 9500 and 16016 unavailable).
  D. The inspection core was stopped (ports 9500 and 16016 unavailable).

• Question 89:

  When sizing a Vulnerability Assessment solution, what is the recommendation for calculating the number of collectors needed?

  A. One collector for every 30K PVU.
  B. One collector for every data center.
  C. One collector for every 35 database servers.
  D. One collector for every 255 database instances.
  D. One collector for every 255 database instances.

• Question 90:

  Which action should be used to ignore activity from users or applications that are producing a high volume of network traffic?

  A. Audit Only
  B. Skip logging
  C. Ignore S-TAP session
  D. Ignore SQL per session
  C. Ignore S-TAP session