IBM C2150-620 問題集

質問 1：
A System Administrator of a banking organization has become aware of some malicious traffic to its IBM Security Network Protection (XGS) appliance. The logs show patters of Denial of Service (DoS) attack and a lot of encrypted packets targeted to the M.1 port of the XGS appliance coming from an internal laptop IP address.
What should the System Administrator do next?
A. Configure Network access policy and Intrusion Prevention Policy to block DoS attacks.
B. Configure Management access policy to set the management port as TCP reset port.
C. Configure Management access policy to restrict access.
D. Configure Inbound SSL policy to inspect and drop such traffic.
正解：D

質問 2：
The System Administrator of a financial company wants to control the network traffic during office hours, for example, social networking or streaming media traffic are forbidden during business hours (08:00-19:00) but are permitted after 19:00 from Monday to Friday. The consultant from an IBM business partner suggested that the Schedule Object in Network Access Policy could be used to fulfill this objective.
Which three parameters are required to create this Schedule Object? (Choose three.)
A. Activation Date
B. Comment
C. End Time
D. Daily
E. Expiration Date
F. Start Time
正解：C,D,F

質問 3：
A System Administrator wants to install a snapshot during the first time configuration of an XGS appliance.
How can this be done?
A. Use the web-based Local Management Interface.
B. Use the Command Line interface over SSH.
C. Use the front panel USB port.
D. Use a console cable connection.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 4：
A System Administrator has configured SSL Inspection in XGS, but end users get promoted to verify the certificate in the browser when viewing SSL web pages. To fix the issue the System Administrator must distribute the CA certificates so that it can be imported in the Trusted Root Certification Authorities in end users' browsers.
Which Menu option allows the System Administrator to download the CA Certificate?
A. Outbound SSL Certificates
B. Inbound SSL Certificates
C. Management Certificate Authorities
D. Appliance SSL Certificate
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Several XGS appliance were deployed in a financial company and are managed centrally by the SiteProtector system. The license files are imported into the SiteProtector system The System Administrator deployed the following policies on one XGS appliance others are intact.



All license types are available and the quantity for each is sufficient.
Which three licenses are consumed by the XGS appliance after deploying these policies without violating the compliance? (Choose three.)
A. Flexible Performance
B. Firmware and X-force Content
C. SSL Inspection
D. IP Reputation
E. QRader
F. Identity and Application Control
正解：C,D,F
解説: (Topexam メンバーにのみ表示されます)

質問 6：
A System Administrator wants to configure two XGS appliances in an active/active high availability (HA) setup so that network traffic can fail over to the secondary XGS without missing inspection of any packets. The diagram below shows the current cabling setup between the redundant firewalls and routers and the 4 built in ports on the XGS appliances:

What is wrong with the cabling diagram?
A. Two extra network cables are required: one from XGS A port 1.3 to XGS B port 1.3 the other from XGS A port 1.4 to XGS B port 1.4.
B. Four extra network cables are required: Cable 1) Firewall A to XGS B, port 1.3; Cable 2) Firewall B to XGS A, port 1.3; Cable 3) XGS A, port 1.4 to Router B; Cable 4) XGS B, port 1.4 to Router A.
C. The incorrect ports are being used on XGS B. The firewall and router should be plugged into ports 1.3 and 1.4 respectively.
D. One extra network cable is required between XGS A and XGS B. It can be plugged into either port 1.3 or 1.4 as long as it is the same port on both XGS appliances.
正解：A
解説: (Topexam メンバーにのみ表示されます)