IBM C2150-606 問題集

質問 1：
During a Guardium deployment planning meeting, a database administrator indicated that the mission critical databases were clustered. How should the Guardium administrator handle S-TAP installation and configuration with respect to clustered databases?
A. Install S-TAP agents on all active and passive nodes. Set ALL_CAN_CONTROL=0 to disable all passive nodes until a database failover occurs.
B. Install S-TAP agents on all active and passive nodes: Set WAIT_FOR_DB_EXEC>0 on all nodes to start S-TAP processes without waiting for a correct DB home.
C. Install S-TAP agents on all active nodes. Set ALL_CAN_CONTROL=1 to failover the STAP process to the passive nodes when a database failover occurs.
D. install S-TAP agents on all active nodes Set WAIT_FOR_DB_EXEC=-1 to set the agent process to failover to the passive node when a database failover occurs.
正解：C

質問 2：
An infrastructure manager is presented with a few new servers that are available to deploy as a Guardium Collector appliance as part of Guardium project expansion. The Guardium administrator is asked which server option is best for a Guardium Collector.
Which server option can the Guardium administrator use for the new Collector?
A. x86_64 Intel Processor with 8-core CPU, 32GB memory, 2 NICs, 1 TB disk
B. x86_64 Intel Processor with dual-core CPU, 24GB memory, and 2 NICs, and 200GB disk
C. ja64 Intel Processor with quad-core CPU, 32GB memory, 4 NICs, 2TB disk
D. Iinuxppc64 Power Processor with 8-core CPU, 24GB memory, and 4 NICs, and 4TB disk
正解：A

質問 3：
A Guardium administrator observes certain changes to the configuration and policies. How would the administrator identify the changes that were made and who made them?
A. Review the Audit Process Log report.
B. Review the /var/log/messages log file.
C. Review the results of 'Detailed Guardium User Activity' report.
D. Review the sniffer buffer usage report.
正解：C

質問 4：
AGuardium administrator is using the Classification, Entitlement and Vulnerability assessment features of the product. Which of the following are correct with regards to these features? (Select two.)
A. Classification for databases and files use the same mechanisms and patterns to search for sensitive data.
B. The classification feature discovers sensitive assets including credit card numbers or national card numbers from various data sources.
C. Vulnerability Assessment identifies and helps correct security vulnerabilities and threats in the database infrastructures.
D. Vulnerability Assessment reports are populated to the Guardium appliance via S-TAP.
E. Entitlement reports are predefined database privilege reports and are populated to the Guardium appliance via S-TAP.
正解：B,C

質問 5：
While looking at the S-TAP Status report on a Collector, a Guardium administrator notices that the status of the S-TAPs is changing every few minutes. The administrator suspects that the sniffer is restarting every few minutes and that is why the status change is happening.
How can the Guardium administrator confirm if the sniffer is restarting every few minutes?
A. Review the Audit Process Log for 'Sniffer stopped' message.
B. Review the Aggregation/Archive Log for 'Sniffer is restarting message.
C. Review the Scheduled Jobs Exceptions for 'Sniffer process failed' message.
D. Review the Buff Usage Monitor for the column TID to see if it changed every few minutes.
正解：D

質問 6：
A Guardium administrator needs to check the traceroute information between one appliance and its Central Manager. Which CLI command should the administrator run?
A. iptraf
B. support show iptables
C. support must_gather network_issues
D. show network routes operational
正解：C