IBM IBM Certifications C2150-606 Questions & Answers

• Question 21:

  After a successful purge, a Guardium administrator observes that the full percentage of the Guardium internal database is not decreasing. The administrator uses support show db- top-tables all and finds the size of the largest tables has decreased significantly.

  What should the administrator do?

  A. Increase the retention period and rerun the purge.

  B. Rebuild the appliance and restore from the backup.

  C. Login to CLI and execute stop inspection-core.

  D. Optimize the internal TURBINEdatabase using diag CLI command.

  Correct Answer: D

• Question 22:

  A Guardium policy has been configured with the following two rules:

  

  AGuardium administrator is required to check for SQL statements from client IP 9.4.5.6 executed on object "TABLET. What domain(s) can the administrator create a report in to see the SQL?

  A. Access

  B. Policy Violations

  C. Access and Access Policy

  D. Access and Policy Violations

  Correct Answer: A

• Question 23:

  AGuardium administrator is registering a new Collector to a Central Manager (CM). The registration failed. As part of the investigation, the administrator wants to identify if the firewall ports are open-How can the administrator do this?

  A. Ask the company's network administrators.

  B. Ask IBM technical support to login as root and verify.

  C. Login as CLI and execute telnet

  D. Login as CLI and execute support show port open

  Correct Answer: D

• Question 24:

  A Guardium administrator needs to install and configure a physical appliance to ensure network redundancy. Which port should the administrator use to configure IP teaming (bonding)?

  A. eth1 only

  B. eth2 only

  C. eth3 only

  D. any port

  Correct Answer: D

• Question 25:

  AGuardium administrator just finished installing the Guardium product to build a Collector. The administrator wants to make sure the Collector has the licenses needed to provide functionality for data activity monitoring, masking and blocking (terminate).

  Which of the following lists the minimum licenses the administrator needs to install?

  A. Base Collector license.

  B. None, the licenses required are already installed automatically by the Guardium product installer.

  C. Base Collector license plus IBM Security Guardium Standard Activity Monitor for Databases (DAM Standard).

  D. Base Collector license plus IBM Security Guardium Advanced Activity Monitor for Databases (DAM Advanced).

  Correct Answer: D

• Question 26:

  AGuardium administrator needs to upgrade BUNDLE-STAP on a Linux server to the latest version using GIM. What parameter should the administrator set to ensure the upgrade will not require a reboot of the server?

  A. KTAP_ENABLED=1

  B. KTAP_NO_ROLLBACK=1

  C. KTAP_LIVE_UPDATE=Y

  D. KTAP_ALLOW_MODULE_COMBOS=Y

  Correct Answer: C

• Question 27:

  A Guardium administrator needs to monitor an Oracle database on a production database server.

  Which component does the administrator need to install on this database server that will monitor the traffic?

  A. S-TAP

  B. Guardium Collector

  C. Guardium Installation Manager (GIM)

  D. Configuration Auditing System (CAS)

  Correct Answer: D

• Question 28:

  Which use cases are covered with the File Activity Monitoring feature? (Select two.)

  A. Classify sensitive files on mainframe systems.

  B. Encrypts database data files on file systems based on policies.

  C. Selectively redacts sensitive data patterns in files based on policies.

  D. Provides audit trail of access to files, alert and/or block when unauthorized users or processes attempt access.

  E. Identifies files containing Personally Identifiable Information (Pll) or proprietary confidential information on Linux Unix Windows (LUW) systems.

  Correct Answer: AE

• Question 29:

  An infrastructure manager is presented with a few new servers that are available to deploy as a Guardium Collector appliance as part of Guardium project expansion. The Guardium administrator is asked which server option is best for a Guardium Collector. Which server option can the Guardium administrator use for the new Collector?

  A. ja64 Intel Processor with quad-core CPU, 32GB memory, 4 NICs, 2TB disk

  B. x86_64 Intel Processor with 8-core CPU, 32GB memory, 2 NICs, 1 TB disk

  C. x86_64 Intel Processor with dual-core CPU, 24GB memory, and 2 NICs, and 200GB disk

  D. Iinuxppc64 Power Processor with 8-core CPU, 24GB memory, and 4 NICs, and 4TB disk

  Correct Answer: B

• Question 30:

  During a Guardium deployment planning meeting, the team decides to deploy all S-TAP agents on all Unix/ Linux database systems. A Unix/Linux system administrator team manager asks a Guardium administrator if there are any differences between Guardium S- TAPs for AIX and Linux systems that the team should be aware of.

  What should be the Guardium administrator's response?

  A. A-TAP is required on all AIX DB Servers.

  B. aserver reboot is required to capture shared memory traffic from all databases on AIX.

  C. K-TAP is required on the AIX DB servers. The exact uname -a output is required to determine the correct K-TAP module for the server.

  D. K-TAP is required on the Linux DB servers. The exact uname -a output is required to determine the correct K-TAP module for the server.

  Correct Answer: B