C2150-606 Online Practice Questions and Answers

A company wants to deploy S-TAPs for 2 groups of database servers located in 2 different data centers. The current set of Collectors are fully utilized. The Aggregators and Central Manager can handle more load.

What should a Guardium administrator recommend?

A. Deploy 2 new Collectors, 1 in each data center.

B. Connect S-TAPs directly to Aggregators to avoid network latency.

C. Connect S-TAPs directly to the Central Manager to avoid network latency.

D. Deploy 2 new Collectors in the third data center located in between the 2 data centers.

A company has recently acquired Guardium software entitlement to help meet their upcoming PCI-DSS audit requirements. The company is entitled to Standard Guardium DAM offering.

Which of the following features can the Guardium administrator use with the current entitlement? (Select two.)

A. Run Vulnerability Assessment reports

B. Generate audit reports using PCI-DSS Accelerator

C. Block and quarantine an unauthorized database connection

D. Mask sensitive PCI-DSS information from web application interface

E. Log and alert all database activities that access PCI-DSS Sensitive Objects.

A Guardium administrator needs to monitor changes to the Oracle configuration file on a production Oracle database server. Assuming all valid licenses are applied, which Guardium component does the administrator need to install and where?

A. Guardium Installation Manager (GIM) on the Database Server

B. Configuration Auditing System (CAS) on the Database Server.

C. Configuration Auditing System (CAS) on the Guardium Collector.

D. Configuration Auditing System (CAS) on the Database Server and on the Guardium Collector.

During a Guardium deployment planning meeting, the team decides to deploy all S-TAP agents on all Unix/ Linux database systems. A Unix/Linux system administrator team manager asks a Guardium administrator if there are any differences between Guardium S- TAPs for AIX and Linux systems that the team should be aware of.

What should be the Guardium administrator's response?

A. A-TAP is required on all AIX DB Servers.

B. aserver reboot is required to capture shared memory traffic from all databases on AIX.

C. K-TAP is required on the AIX DB servers. The exact uname -a output is required to determine the correct K-TAP module for the server.

D. K-TAP is required on the Linux DB servers. The exact uname -a output is required to determine the correct K-TAP module for the server.

A Guardium administrator is preparing commands to install or upgrade an S-TAP using the command line method. Which operating system can use the ktap_allow_module_combos parameter for the installation and upgrade?

A. AIX

B. Linux

C. Solaris

D. HP-UX

A Guardium administrator is preparing a command to install Configuration Auditing System (CAS) on a Linux server using the command line method. Which parameter is required?

A. dir

B. tapip

C. java-home

D. sqlguardip

A Guardium administrator handles a large environment and has been asked to restore old data for auditors to review. This old data needs to be restored so that it does not impact the current data being collected or any merge settings. In order to keep the reports separate (old datavs current data), the administrator sets up an Investigation Center.

Which is a key requirement for users of the Investigation Center?

A. The user must be in one of the groups INV_1, INV_2, or INV_3 (case-sensitive).

B. The users must login as one of the predefined user accounts INV_1, INV_2, orlNV_3 (case-sensitive).

C. A separate user must be used with a role of either INV_1, INV_2, or INV_3 (case- sensitive).

D. To correctly configure an investigation user, the user's Last Name must be set to the name of one of the three investigation databases, INV_1, INV_2, or INV_3 (case-sensitive).

A Guardium administrator needs to build new appliances with the latest version of Guardium. How should the administrator obtain the ISO image?

A. Contact IBM Support.

B. Download fromibm.com

C. Download from IBM Fix Central.

D. Download from IBM Passport Advantage.

An administrator has a new standalone Guardium appliance that will be placed into production next week. The appliance will monitor traffic from a number of databases with a high volume of traffic. The administrator needs to configure the schedule to ensure the appliance internal database does not get full with incoming data.

Which data management function does the administrator need to configure?

A. Purge

B. Data Export

C. Data Restore

D. System Backup

An administrator manages a Guardium environment including 4 Collectors exporting data to an Aggregator. The Collectors export their data daily at 2, 3, 4 and 5 am Eastern Standard Time (EST) respectively. The Collectors receive traffic every day. The logs on all the Collectors confirm data is exported daily without errors, and all the exported files always have data. A Session report is run on the Aggregator at noon EST for data from the last day.

Which of the following will ensure there is data in the report?

A. Schedule Data Purge on the Aggregator to run every day after 5 am EST.

B. Schedule Data Import on the Aggregator to run at any time of the day.

C. Schedule Data Import in the Aggregator to run every day before 2 am EST.

D. Schedule Data Import on the Aggregator to run every day at 6 am EST or later.