IBM IBM Certifications C2150-606 Questions & Answers

• Question 41:

  A Guardium administrator must configure real time policy alerts to be sent to a remote SIEM for every SQL statement run on a sensitive object. There is no requirement for the data to be viewed or reported on in the Guardium appliance.

  Which policy action would achieve that task and store the least amount of data in the Guardium internal database?

  A. Log Only

  B. Alert Only

  C. Alert Daily

  D. Alert Per Match

  Correct Answer: C

• Question 42:

  A company has recently acquired Guardium software entitlement to help meet their upcoming PCI-DSS audit requirements. The company is entitled to Standard Guardium DAM offering.

  Which of the following features can the Guardium administrator use with the current entitlement? (Select two.)

  A. Run Vulnerability Assessment reports

  B. Generate audit reports using PCI-DSS Accelerator

  C. Block and quarantine an unauthorized database connection

  D. Mask sensitive PCI-DSS information from web application interface

  E. Log and alert all database activities that access PCI-DSS Sensitive Objects.

  Correct Answer: AB

• Question 43:

  A Guardium administrator is creating a policy to alert on actions by users that are stored on an LDAP server. How can the administrator populate a group to use in the policy?

  A. Schedule the LDAP user import into the group.

  B. Schedule the LDAP user import from accessmgr and run portal user sync.

  C. Schedule the LDAP user import from accessmgr and populate the group from a query.

  D. Populate the group from a query in access domain with a condition on the LDAP server as the Server IP.

  Correct Answer: C

• Question 44:

  An administrator just installed the Guardium product using the Guardium ISO image. Which step must the administrator perform as part of the initial set-up of the new appliance?

  A. Generate the GUI certificate request.

  B. Configure network settings on the appliance.

  C. Restart the sniffer process from the CLI command prompt.

  D. Obtain the passwords for the databases to be monitored by the appliance.

  Correct Answer: B

• Question 45:

  AGuardium environment is set up to send daily reports to users. The users are complaining that their report has not been delivered to their inbox for the past week. What is the first action the Guardium administrator should take in order to diagnose the problem?

  A. Open a ticket with IBM Support.

  B. Pause the User Portal Sync process.

  C. Check in the Aggregation/Archive log.

  D. Check in the Scheduled Job Exceptions.

  Correct Answer: D

• Question 46:

  AGuardium administrator has rebuilt an appliance, and wants nowto restore a backup image of the entire database, audit data, and all definitions from Data backup.Which CLI command should the administrator use to accomplish this?

  A. restore config

  B. restore system

  C. restore pre-patch-backup

  D. restore certificate sniffer backup

  Correct Answer: B

• Question 47:

  The guard_tap.ini of a UNIX S-TAP is configured with the following parameters: The collector that this S-TAP is sending data to has become unavailable and there is no failover option configured. A Guardium administrator must communicate the impact of this outage to users of the monitored database.

  

  What should the administrator advise is the expected behavior for a database session?

  A. The session will not experience any latency or termination.

  B. No SQL can be executed and after 10 seconds the session will be terminated.

  C. in the first 10 seconds of the session SQL can be executed, then the session is terminated.

  D. in the first 10 seconds of the session no SQL can be executed, then the session will work as normal.

  Correct Answer: C

• Question 48:

  In a centrally managed environment, while executing the report 'Enterprise Buffer Usage Monitor', a Guardium administrator gets an empty report. Why is the report empty?

  A. Sniffers are not running on the Collectors.

  B. The report is not executed with a remote source on the Collector.

  C. The report is not executed with a remote source on the Aggregator.

  D. Correct custom table upload is not scheduled on the Central Manager.

  Correct Answer: C

• Question 49:

  A Guardium administrator needs to configure EMC Centera for Archive and/or Backup.

  In addition to the server IP address, what else is required to establish connection with an EMC Centera on the network?

  A. ciipID

  B. PEA file

  C. Shared secret

  D. Certificate signed request (CSR)

  Correct Answer: B

• Question 50:

  A Guardium administrator needs to use both CLI and GrdAPI functions to manage the system.

  Which are the two commands that the administrator can use to search for the required commands and their syntax from within either CLI or GrdAPI?

  A. CLI: commands

  GrdApi: grdapi --help

  B. CLI: help

  GrdApi: grdapi --help

  C. CLI: commands

  GrdAPI: grdapi command

  D. CLI:

  -help GrdApi: grdapi -help=true

  Correct Answer: D