IBM C2150-620 問題集

質問 1：
The System Administrator has discovered the XGS device is overloaded and is dropping legitimate traffic.
Which setting is likely responsible for this behavior?
A. TCP resets- TCP reset interface
B. LogDB response enabled on NAP rules
C. Unanalyzed policy configuration
D. Fail Closed hardware bypass mode
正解：C

質問 2：
A System Administrator has an XGS 4100 appliance that has a single 8-port RJ-45 copper Network Interface Module (NIM) installed.
What is the maximum number of in-line network segments, of any media type, that could be protected?
A. 2
B. 10
C. 4
D. 6
正解：A

質問 3：
A System Administrator wants to configure two XGS appliances in an active/active high availability (HA) setup so that network traffic can fail over to the secondary XGS without missing inspection of any packets. The diagram below shows the current cabling setup between the redundant firewalls and routers and the 4 built in ports on the XGS appliances:

What is wrong with the cabling diagram?
A. Two extra network cables are required: one from XGS A port 1.3 to XGS B port 1.3 the other from XGS A port 1.4 to XGS B port 1.4.
B. Four extra network cables are required: Cable 1) Firewall A to XGS B, port 1.3; Cable 2) Firewall B to XGS A, port 1.3; Cable 3) XGS A, port 1.4 to Router B; Cable 4) XGS B, port 1.4 to Router A.
C. The incorrect ports are being used on XGS B. The firewall and router should be plugged into ports 1.3 and 1.4 respectively.
D. One extra network cable is required between XGS A and XGS B. It can be plugged into either port 1.3 or 1.4 as long as it is the same port on both XGS appliances.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Security Policies of an organization demand that no network traffic should be allowed by XGS without inspection in case of XGS power failure or traffic beyond XGS capabilities.
What should be the settings for built-in Hardware Bypass and Unanalyzed Policy?
A. Hardware Bypass Mode= Fail Closed; Unanalyzed Policy= Forward
B. Hardware Bypass Mode= Fail Closed; Unanalyzed Policy= Drop
C. Hardware Bypass Mode= Fail Open; Unanalyzed Policy = Forward
D. Hardware Bypass Mode= Fail Open; Unanalyzed Policy= Drop
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
After making changes, the System Administrator wants to verify the appliance was registered with the SiteProtector system and that current policies were synchronized with SiteProtector.
Which two methods can be used to accomplish this? (Choose two.)
A. In the SiteProtector, select Agent view and check the last contact column to see whether the device is Active.
B. In the SiteProtector console, select Asset view and check health status.
C. In the SiteProtector console, check the health summary in the agent properties.
D. Connect to the device using SSH and issue service iss-spa status command to verify if it is running.
E. Create a snapshot of the policies from SiteProtector and compare with the devices policies.
正解：A,D
解説: (Topexam メンバーにのみ表示されます)

質問 6：
A System Administrator has heard that many shopping web sites are infected due to a new vulnerability affecting shopping cart modules used by many open source e-Commerce platforms. The vulnerability only affects shopping sites using SSL.
At the System Administrator's organization, all web-based shopping applications are blocked as required by company policy. Rule 1 was already in place to accomplish this.
Outbound SSL inspection was also enabled. The System Administrator has added Rule2 in an attempt to optimize inspection and better enforce company requirements.

Which analysis of this Network Access Policy is correct with regard to packet inspection optimization?
A. Rule1 is more efficient than Rule2, but Rule2 adds a second layer protection.
B. Rule2 is more efficient than Rule1, so the order of Rule1 and Rule2 should be reversed.
C. Rule1 is no longer required. Rule 2 protects from infected web sites.
D. Rule2 is not required, because Rule1 is already more efficient.
正解：C