IBM Security Guardium V10.0 Administration - C2150-606 Exam Practice Test

Question 1

Which port must be open for encrypted communication between UNIX S-TAP and Collector?

A. 9500

B. 16016

C. 16018

D. 16017

Correct Answer: C

Question 2

An administrator has a new standalone Guardium appliance that will be placed into production next week. The appliance will monitor traffic from a number of databases with a high volume of traffic. The administrator needs to configure the schedule to ensure the appliance internal database does not get full with incoming data.
Which data management function does the administrator need to configure?

A. Data Restore

B. Purge

C. Data Export

D. System Backup

Correct Answer: B

Question 3

A company has recently acquired Guardium software entitlement to help meet their upcoming PCI-DSS audit requirements. The company is entitled to Standard Guardium DAM offering.
Which of the following features can the Guardium administrator use with the current entitlement? (Select two.)

A. Log and alert all database activities that access PCI-DSS Sensitive Objects.

B. Mask sensitive PCI-DSS information from web application interface

C. Block and quarantine an unauthorized database connection

D. Run Vulnerability Assessment reports

E. Generate audit reports using PCI-DSS Accelerator

Correct Answer: D,E

Question 4

A Guardium administrator is setting up a Collector schedule to export data to an Aggregator and Archive its data to an Archive storage unit for additional data safety.
Given this scenario, which is true regarding the purge schedule?

A. Any time that Data Export and Data Archive are both configured, the purge age must be greater than both the ageat which to export and the ageat which to archive.

B. it would not be possible to configure both on a Collector, the Aggregator should do the archiving and only export from the Collector.

C. The Guardium unit would run the Export and Archive before any purge, so you would only see the last purge run each day.

D. The Archive and the Export have independent purge schedules but should not be run at the same time.

Correct Answer: A

Question 5

A Guardium administrator must configure real time policy alerts to be sent to a remote SIEM for every SQL statement run on a sensitive object. There is no requirement for the data to be viewed or reported on in the Guardium appliance.
Which policy action would achieve that task and store the least amount of data in the
Guardium internal database?

A. Alert Per Match

B. Log Only

C. Alert Daily

D. Alert Only

Correct Answer: C

Question 6

A Guardium administrator needs to use CLI commands to maintain the internal database, clean static orphans, produce static system reports and to monitor live network traffic filtered by IP addresses and port numbers.
Which combination of commands should the administrator use for these tasks?

A. support must_gatherandshow network verify

B. diag and trace_route

C. jptrafandsupport must_gather

D. diagandiptraf

Correct Answer: C

IBM Security Guardium V10.0 Administration - C2150-606 Exam Practice Test

Latest Update

Useful Links

Contact Us