C2150-606 by IBM Valid Free Exam Practice Test

Question 1

A company has recently acquired Guardium software entitlement to help meet their upcoming PCI-DSS audit requirements. The company is entitled to Standard Guardium DAM offering.
Which of the following features can the Guardium administrator use with the current entitlement? (Select two.)

A. Mask sensitive PCI-DSS information from web application interface B. Log and alert all database activities that access PCI-DSS Sensitive Objects. C. Block and quarantine an unauthorized database connection D. Run Vulnerability Assessment reports E. Generate audit reports using PCI-DSS Accelerator

Correct Answer: D,E

Question 2

A company wants to deploy S-TAPs for 2 groups of database servers located in 2 different data centers. The current set of Collectors are fully utilized. The Aggregators and Central Manager can handle more load.
What should a Guardium administrator recommend?

A. Connect S-TAPs directly to Aggregators to avoid network latency. B. Deploy 2 new Collectors, 1 in each data center. C. Deploy 2 new Collectors in the third data center located in between the 2 data centers. D. Connect S-TAPs directly to the Central Manager to avoid network latency.

Correct Answer: B

Question 3

AGuardium administrator must configure a policy to ignore all traffic from an application with a known client IP. Due to the high amount of traffic from this application, performance of the S-TAP and sniffer is a concern.
What action should the administrator use in the rule?

A. ignore SQL per Session B. ignore Responses per Session C. Ignore Session D. ignore S-TAP Session

Correct Answer: D

Question 4

A Guardium administrator installed an S-TAP but is not seeing any data in reports on the collector. The administrator discovered that an Inspection Engine is not configured for that S-TAP.
What is an Inspection Engine?

A. The same thing as the policy and it runs on the S-TAP to inspect the traffic in real-time. B. A piece of software residing on the Collectors. C. A set of parameters needed for the S-TAP to define how to monitor traffic for a particular database instance on a server. D. Another software to be installed on the Database server.

Correct Answer: A

Question 5

A Guardium administrator manages an environment containing four standalone Collectors. The administrator has been asked to provide a weekly report showing all Data Manipulation Language (DML) SQL statements performed by all database administrators on all databases. The administrator does not want to run the report on each Collector.
What should the administrator do to simplify this task and run the report in only one place every week?

A. Add a Guardium Aggregator to the environment. Create and run the report on the Aggregator. B. install a Configuration Auditing System (CAS) on each Database Server. Configure the CAS Client to send data to a Collector. Create and run the report on the Collector. C. Replace the 4 Collectors with one Aggregator. D. Create an Enterprise Report on one Collector combining the data.

Correct Answer: A

Question 6

A Guardium administrator manages portal user synchronization by using a Central Manager.
When a change is made on the Central Manager such as, for example, adding a Guardium user to a Guardium group, how long should be allowed for the update to be synced with the managed units in a fully working environment?

A. 30 minutes B. 60 minutes C. 15 minutes D. 0minutes

Correct Answer: B

IBM Security Guardium V10.0 Administration - C2150-606 Exam Practice Test