IBM C2150-606 Exam Practice Questions (P. 5)
- Full Access (55 questions)
- Six months of Premium Access
- Access to one million comments
- Seamless ChatGPT Integration
- Ability to download PDF files
- Anki Flashcard files for revision
- No Captcha & No AdSense
- Advanced Exam Configuration
Question #21
A Guardium administrator has rebuilt an appliance, and wants now to restore a backup image of the entire database, audit data, and all definitions from Data
Backup.
Which CLI command should the administrator use to accomplish this?
Backup.
Which CLI command should the administrator use to accomplish this?
- Arestore config
- Brestore system
- Crestore pre-patch-backup
- Drestore certificate sniffer backup
Correct Answer:
B
System backups are used to backup and store all the necessary data and configuration values to restore a server in case of hardware corruption. To restore backed up system information, use the restore system CLI command
Incorrect:
Not A: restore config -
These commands back up and restore configuration information from the internal administration tables. The backup config command stores data in the /media/ backup directory. The backup config command removes license and other machine-specific information. The backup system command provides a more comprehensive backup of the configuration and the entire system.
Not C: restore pre-patch-backup is related to patch installations.
Reference:
http://www-01.ibm.com/support/knowledgecenter/SSMPHH_9.0.0/com.ibm.guardium.using.doc/dita-appendices_help1_book/topics/ file_handling_cli_commands.html
B
System backups are used to backup and store all the necessary data and configuration values to restore a server in case of hardware corruption. To restore backed up system information, use the restore system CLI command
Incorrect:
Not A: restore config -
These commands back up and restore configuration information from the internal administration tables. The backup config command stores data in the /media/ backup directory. The backup config command removes license and other machine-specific information. The backup system command provides a more comprehensive backup of the configuration and the entire system.
Not C: restore pre-patch-backup is related to patch installations.
Reference:
http://www-01.ibm.com/support/knowledgecenter/SSMPHH_9.0.0/com.ibm.guardium.using.doc/dita-appendices_help1_book/topics/ file_handling_cli_commands.html
send
light_mode
delete
Question #22
The quard_tap.ini of a UNIX S-TAP is configured with the following parameters: firewall_installed=1 firewall_fail_close=0 firewall_default_state=0 firewall_timeout=10
A Guardium administrator applies a policy to the Collector with two rules as below. The actions of the rules have been hidden.


The administrator must create a policy that will terminate the session on the delete statement in the below scenario:
A session is started to the monitored database from client IP 9.9.8.7. In the session the user plans to perform a select statement and then a delete statement.
What actions should the administrator configure?
A Guardium administrator applies a policy to the Collector with two rules as below. The actions of the rules have been hidden.


The administrator must create a policy that will terminate the session on the delete statement in the below scenario:
A session is started to the monitored database from client IP 9.9.8.7. In the session the user plans to perform a select statement and then a delete statement.
What actions should the administrator configure?
- ARule 1 - S-GATE Attach Rule 2 - S-GATE Detach
- BRule 1 - S-GATE Detach Rule 2 - S-GATE Terminate
- CRule 1 - S-GATE Attach Rule 2 - S-GATE Terminate
- DRule 1 - S-TAP Terminate
Correct Answer:
A
Note:
* S-GATE ATTACH: sets S-GATE mode to "Attached" for a specific session.
Intended for use when a certain criteria is met that raises the need to closely watch (and if needed block) the traffic on that session.
* S-GATE DETACH: sets S-GATE mode to "Detached" for a specific session.
Intended for use on sessions that are considered as "safe" or sessions that cannot tolerate any latency.
* S-GATE TERMINATE: Has effect only when the session is attached. It drops the reply of the firewalled request, which will terminate the session on some databases. The S-GATE TERMINATE policy rule will cause a previously watched session to terminate.
Reference:
https://www-01.ibm.com/support/knowledgecenter/SSMPHH_9.5.0/com.ibm.guardium95.doc/protect/topics/rule_actions.html
A
Note:
* S-GATE ATTACH: sets S-GATE mode to "Attached" for a specific session.
Intended for use when a certain criteria is met that raises the need to closely watch (and if needed block) the traffic on that session.
* S-GATE DETACH: sets S-GATE mode to "Detached" for a specific session.
Intended for use on sessions that are considered as "safe" or sessions that cannot tolerate any latency.
* S-GATE TERMINATE: Has effect only when the session is attached. It drops the reply of the firewalled request, which will terminate the session on some databases. The S-GATE TERMINATE policy rule will cause a previously watched session to terminate.
Reference:
https://www-01.ibm.com/support/knowledgecenter/SSMPHH_9.5.0/com.ibm.guardium95.doc/protect/topics/rule_actions.html
send
light_mode
delete
Question #23
A Guardium policy has been configured with the following two rules:


A Guardium administrator is required to check for SQL statements from client IP 9.4.5.6 executed on object "TABLE1".
What domain(s) can the administrator create a report in to see the SQL?


A Guardium administrator is required to check for SQL statements from client IP 9.4.5.6 executed on object "TABLE1".
What domain(s) can the administrator create a report in to see the SQL?
- AAccess
- BPolicy Violations
- CAccess and Access Policy
- DAccess and Policy Violations
Correct Answer:
A
The Log full details action logs the full SQL string and exact timestamp for this request.
The Access domain consists of all monitored SQL requests.
Reference:
https://www-01.ibm.com/support/knowledgecenter/SSMPHH_9.5.0/com.ibm.guardium95.doc/protect/topics/rule_actions.html
A
The Log full details action logs the full SQL string and exact timestamp for this request.
The Access domain consists of all monitored SQL requests.
Reference:
https://www-01.ibm.com/support/knowledgecenter/SSMPHH_9.5.0/com.ibm.guardium95.doc/protect/topics/rule_actions.html
send
light_mode
delete
Question #24
A Guardium administrator needs to use CLI commands to maintain the internal database, clean static orphans, produce static system reports and to monitor live network traffic filtered by IP addresses and port numbers.
Which combination of commands should the administrator use for these tasks?
Which combination of commands should the administrator use for these tasks?
- Adiag and iptraf
- Bdiag and trace_route
- Ciptraf and support must_gather
- Dsupport must_gather and show network verify
Correct Answer:
C
Iptraf utility generates network statistics based on current network activity.
Incorrect:
Not A, not B: Diag can be used if there is a problem with the Guardium STAP, andinformation must be gathered before contacting IBM Software Support. Diag collects comprehensive diagnostic data.
Not D: The show network verify command displays the current network configuaration.
Reference:
http://www-01.ibm.com/support/docview.wss?uid=swg21690345
C
Iptraf utility generates network statistics based on current network activity.
Incorrect:
Not A, not B: Diag can be used if there is a problem with the Guardium STAP, andinformation must be gathered before contacting IBM Software Support. Diag collects comprehensive diagnostic data.
Not D: The show network verify command displays the current network configuaration.
Reference:
http://www-01.ibm.com/support/docview.wss?uid=swg21690345
send
light_mode
delete
Question #25
The final section of each exam is exclusively available to users with Contributor Access. This temporary measure was implemented to cover the expenses of the SecExams infrastructure and moderation staff while also decreasing the load on our infrastructure.
- ARestricted Option
- BRestricted Option
- CRestricted Option
- DRestricted Option
send
light_mode
delete
All Pages