IBM C2150-606 Online Practice Questions and Exam Preparation

IBM C2150-606 Online Questions & Answers

• Question 1:

  While looking at the S-TAP Status report on a Collector, a Guardium administrator notices that the status of the S-TAPs is changing every few minutes. The administrator suspects that the sniffer is restarting every few minutes and that is why the status change is happening.

  How can the Guardium administrator confirm if the sniffer is restarting every few minutes?

  A. Review the Audit Process Log for 'Sniffer stopped' message.
  B. Review the Aggregation/Archive Log for 'Sniffer is restarting message.
  C. Review the Scheduled Jobs Exceptions for 'Sniffer process failed' message.
  D. Review the Buff Usage Monitor for the column TID to see if it changed every few minutes.
  D. Review the Buff Usage Monitor for the column TID to see if it changed every few minutes.

• Question 2:

  An administrator manages a Guardium environment including 4 Collectors exporting data to an Aggregator. The Collectors export their data daily at 2, 3, 4 and 5 am Eastern Standard Time (EST) respectively. The Collectors receive traffic every day. The logs on all the Collectors confirm data is exported daily without errors, and all the exported files always have data. A Session report is run on the Aggregator at noon EST for data from the last day.

  Which of the following will ensure there is data in the report?

  A. Schedule Data Purge on the Aggregator to run every day after 5 am EST.
  B. Schedule Data Import on the Aggregator to run at any time of the day.
  C. Schedule Data Import in the Aggregator to run every day before 2 am EST.
  D. Schedule Data Import on the Aggregator to run every day at 6 am EST or later.
  C. Schedule Data Import in the Aggregator to run every day before 2 am EST.

• Question 3:

  AGuardium environment is set up to send daily reports to users. The users are complaining that their report has not been delivered to their inbox for the past week. What is the first action the Guardium administrator should take in order to diagnose the problem?

  A. Open a ticket with IBM Support.
  B. Pause the User Portal Sync process.
  C. Check in the Aggregation/Archive log.
  D. Check in the Scheduled Job Exceptions.
  D. Check in the Scheduled Job Exceptions.

• Question 4:

  A Guardium administrator needs to install and configure a physical appliance to ensure network redundancy. Which port should the administrator use to configure IP teaming (bonding)?

  A. eth1 only
  B. eth2 only
  C. eth3 only
  D. any port
  D. any port

• Question 5:

  Simple Mail Transfer Protocol (SMTP) has recently been configured on a Guardium appliance. How can the administrator confirm the configuration is correct? (Select 2)

  A. Restart the Anomaly detection process
  B. Send a test email with CLI diag command
  C. From the GUI Alerter page, test the SMTP connection
  D. Create a query in access domain to see the sent messages
  E. Obtain the syslog file from fileserver and check for SMTP messages
  B. Send a test email with CLI diag command
  C. From the GUI Alerter page, test the SMTP connection

• Question 6:

  AGuardium administrator needs to upgrade BUNDLE-STAP on a Linux server to the latest version using GIM. What parameter should the administrator set to ensure the upgrade will not require a reboot of the server?

  A. KTAP_ENABLED=1
  B. KTAP_NO_ROLLBACK=1
  C. KTAP_LIVE_UPDATE=Y
  D. KTAP_ALLOW_MODULE_COMBOS=Y
  C. KTAP_LIVE_UPDATE=Y

• Question 7:

  A Guardium administrator is planning to build an environment that contains an S-TAP with one primary Collector and one failover Collector. What must the administrator ensure when setting up this environment?

  A. Both Collectors are centrally managed.
  B. There is network connectivity between the S-TAP and both Collectors.
  C. Guardium Installation Manager (GIM) is installed on the Database Server.
  D. in the guard_tap.ini file of the S-TAP set participate_in_load_balancing=1
  B. There is network connectivity between the S-TAP and both Collectors.

• Question 8:

  AGuardium administrator just finished installing the Guardium product to build a Collector. The administrator wants to make sure the Collector has the licenses needed to provide functionality for data activity monitoring, masking and blocking (terminate).

  Which of the following lists the minimum licenses the administrator needs to install?

  A. Base Collector license.
  B. None, the licenses required are already installed automatically by the Guardium product installer.
  C. Base Collector license plus IBM Security Guardium Standard Activity Monitor for Databases (DAM Standard).
  D. Base Collector license plus IBM Security Guardium Advanced Activity Monitor for Databases (DAM Advanced).
  D. Base Collector license plus IBM Security Guardium Advanced Activity Monitor for Databases (DAM Advanced).

• Question 9:

  Which use cases are covered with the File Activity Monitoring feature? (Select two.)

  A. Classify sensitive files on mainframe systems.
  B. Encrypts database data files on file systems based on policies.
  C. Selectively redacts sensitive data patterns in files based on policies.
  D. Provides audit trail of access to files, alert and/or block when unauthorized users or processes attempt access.
  E. Identifies files containing Personally Identifiable Information (Pll) or proprietary confidential information on Linux Unix Windows (LUW) systems.
  A. Classify sensitive files on mainframe systems.
  E. Identifies files containing Personally Identifiable Information (Pll) or proprietary confidential information on Linux Unix Windows (LUW) systems.

• Question 10:

  During the initial phase of the Guardium deployment, the Guardium administrator wants to figure out an ideal time period to purge data from the appliance based on the data load. Which predefined Guardium report(s) allows the administrator to determine the current database disk usage of the Guardium Appliance?

  A. Disk UtiI report
  B. Aggregation/Archive log
  C. DB Server throughput report
  D. Buff Usage Monitor and System Monitor reports
  D. Buff Usage Monitor and System Monitor reports