IBM C2150-620 問題集

質問 1：
A System Administrator wants to configure the Automated Service and Support Request feature.
Where can settings for this be configured.
A. On Local Management Interface, only after initial appliance setup is complete
B. On SiteProtector only
C. Command Line Interface only
D. On Local Management Interface, only during initial appliance setup
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 2：
A Network Administrator wants to block all social media type websites, including Facebook and Google+.
Which Network Object should be used to achieve a broad match on all social media websites?
A. URL List Object
B. Address Object
C. URL Category Object
D. Inspection Object
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
The System Administrator for a financial organization wants to register an XGS appliance to SiteProtector. There are two SiteProtector Sites:
*
SiteProtector_1 in Strict mode has AgentManager_1 installed in it.
*
SiteProtector_2 in Compatible mode has AgentManager_2 installed in it.
The System Administrator has configured XGS SiteProtector Management policy as follows:

In which SiteProtector instance should this XGS appear as Active based on the above policy given that there are no other network issues?
A. XGS should be seen as Active in both SiteProtector sites.
B. XGS should be seen as Active in SiteProtector_1 only.
C. XGS should not be active in any of the SiteProtector sites.
D. XGS should be seen as Active in SiteProtector_2 only.
正解：D

質問 4：
The System Administrator has discovered the XGS device is overloaded and is dropping legitimate traffic.
Which setting is likely responsible for this behavior?
A. TCP resets- TCP reset interface
B. LogDB response enabled on NAP rules
C. Unanalyzed policy configuration
D. Fail Closed hardware bypass mode
正解：C

質問 5：
A specialized third- party appliance protects customer networks by detecting any data transmissions that do not meet the minimum security standards. The security officer wants to be alerted when machines on the customer network send data out of the internal LAN using a low encryption level and prevent them from doing so until the minimum level of encryption is met.
How can the XGS be configured to contain the exposed risk?
A. Configure the DLP device to send a message to the IPS Event filter policy and manipulate the IPS signature response to quarantine.
B. Enable the content analysis module and the associated signatures that are configured to detect the minimum encryption and configure the quarantine response within the IPS policy.
C. Configure the ATP Agents policy to allow the third-party device to send a quarantine and enable responses in the ATP policy.
D. Enable all IPS signatures that are configured to detect the minimum encryption and configure the block response within the IPS policy.
正解：D

質問 6：
The System Administrator of an oil and gas company has an XGS appliance deployed in the network below:

The appliance was working in Inline simulation mode and suddenly there was a power failure on the switch which causes link 1.2 on XGS to go down, However, port 1.1 on XGS remains up and hence the firewall keeps on sending the traffic to XGS appliance without realizing failure in the path.
Which setting should be corrected in the Protection Interface policy to avoid this behavior?
A. Ensure that Propagate link is set to Yes.
B. Ensure that hardware bypass mode is set to Fail Open.
C. Ensure that hardware bypass mode is set to Fail Closed.
D. Ensure that Propagate link is set to No.
正解：C
解説: (Topexam メンバーにのみ表示されます)