All About Breathing C2150-606 Exam Question

NEW QUESTION 1
A Guardium administrator is setting up a Collector schedule to export data to an Aggregator and Archive its data to an Archive storage unit for additional data safety.
Given this scenario, which is true regarding the purge schedule?

• A. The Archive and the Export have independent purge schedules but should not be run at the same time.
• B. The Guardium unit would run the Export and Archive before any purge, so you would only see the last purge run each day.
• C. it would not be possible to configure both on a Collector, the Aggregator should do the archiving and only export from the Collector.
• D. Any time that Data Export and Data Archive are both configured, the purge age must be greater than both the age at which to export and the age at which to archive.

Answer: D

NEW QUESTION 2
A Guardium administrator installed an S-TAP but is not seeing any data in reports on the collector. The administrator discovered that an Inspection Engine is not configured for that S-TAP.
What is an Inspection Engine?

• A. A piece of software residing on the Collectors.
• B. Another software to be installed on the Database server.
• C. The same thing as the policy and it runs on the S-TAP to inspect the traffic in real-time.
• D. A set of parameters needed for the S-TAP to define how to monitor traffic for a particular database instance on a server.

Answer: C

NEW QUESTION 3
A Guardium administrator needs to use CLI commands to maintain the internal database, clean static orphans, produce static system reports and to monitor live network traffic filtered by IP addresses and port numbers.
Which combination of commands should the administrator use for these tasks?

• A. diag and iptraf
• B. diag and trace_route
• C. jptraf and support must_gather
• D. support must_gather and show network verify

Answer: C

NEW QUESTION 4
AGuardium administrator needs to upgrade BUNDLE-STAP on a Linux server to the latest version using GIM. What parameter should the administrator set to ensure the upgrade will not require a reboot of the server?

• A. KTAP_ENABLED=l
• B. KTAP_NO_ROLLBACK=l
• C. KTAP_LIVE_UPDATE=Y
• D. KTAP_ALLOW_MODULE_COMBOS=Y

Answer: C

NEW QUESTION 5
During a Guardium deployment planning meeting, a database administrator indicated that the mission critical databases were clustered. How should the Guardium administrator handle S-TAP installation and configuration with respect to clustered databases?

• A. Install S-TAP agents on all active node
• B. Set ALL_CAN_CONTROL=l to failover the S-TAP process to the passive nodes when a database failover occurs.
• C. install S-TAP agents on all active nodes Set WAIT_FOR_DB_EXEC=-l to set the agent process to failover to the passive node when a database failover occurs.
• D. Install S-TAP agents on all active and passive node
• E. Set ALL_CAN_CONTROL=0 to disable all passive nodes until a database failover occurs.
• F. Install S-TAP agents on all active and passive nodes: Set WAIT_FOR_DB_EXEC>0 on all nodes to start S-TAP processes without waiting for a correct DB home.

Answer: A

NEW QUESTION 6
AGuardium administrator is registering a new Collector to a Central Manager (CM). The registration failed. As part of the investigation, the administrator wants to identify if the firewall ports are open-How can the administrator do this?

• A. Ask the company's network administrators.
• B. Ask IBM technical support to login as root and verify.
• C. Login as CLI and execute telnet <ip address> <port number>
• D. Login as CLI and execute support show port open <ip address> <port number>

Answer: D

NEW QUESTION 7
Which use cases are covered with the File Activity Monitoring feature? (Select two.)

• A. Classify sensitive files on mainframe systems.
• B. Encrypts database data files on file systems based on policies.
• C. Selectively redacts sensitive data patterns in files based on policies.
• D. Provides audit trail of access to files, alert and/or block when unauthorized users or processes attempt access.
• E. Identifies files containing Personally Identifiable Information (Pll) or proprietary confidential information on Linux Unix Windows (LUW) systems.

Answer: AE

NEW QUESTION 8
A Guardium administrator needs to check the traceroute information between one appliance and its Central Manager. Which CLI command should the administrator run?

• A. iptraf
• B. support show iptables
• C. show network routes operational
• D. support must_gather network_issues

Answer: D

NEW QUESTION 9
AGuardium environment is set up to send daily reports to users. The users are complaining that their report has not been delivered to their inbox for the past week. What is the first action the Guardium administrator should take in order to diagnose the problem?

• A. Open a ticket with IBM Support.
• B. Pause the User Portal Sync process.
• C. Check in the Aggregation/Archive log.
• D. Check in the Scheduled Job Exceptions.

Answer: D

NEW QUESTION 10
An infrastructure manager is presented with a few new servers that are available to deploy as a Guardium Collector appliance as part of Guardium project expansion. The Guardium administrator is asked which server option is best for a Guardium Collector.
Which server option can the Guardium administrator use for the new Collector?

• A. ja64 Intel Processor with quad-core CPU, 32GB memory, 4 NICs, 2TB disk
• B. x86_64 Intel Processor with 8-core CPU, 32GB memory, 2 NICs, l TB disk
• C. x86_64 Intel Processor with dual-core CPU, 24GB memory, and 2 NICs, and 200GB disk
• D. Iinuxppc64 Power Processor with 8-core CPU, 24GB memory, and 4 NICs, and 4TB disk

Answer: B

NEW QUESTION 11
The last Vulnerability Assessment tests performed in a company were run one year ago. The company wants to ensure the Vulnerability Assessment tests keep up with the latest database common vulnerabilities. The company wants to use the Guardium default tests instead of customer designed tests.
What should the Guardium administrator do to update the tests that will be run?

• A. install the latest patch on the Guardium appliance.
• B. Install the latest released Database Activity Monitor Content.
• C. Ask the database administrators to provide the default tests.
• D. Ask the Company Security Provider to supply the default tests

Answer: B

NEW QUESTION 12
A Guardium administrator is preparing a command to install Configuration Auditing System (CAS) on a Linux server using the command line method. Which parameter is required?

• A. dir
• B. tapip
• C. java-home
• D. sqlguardip

Answer: D

NEW QUESTION 13
AGuardium administrator must configure a policy to ignore all traffic from an application with a known client IP. Due to the high amount of traffic from this application, performance of the S-TAP and sniffer is a concern.
What action should the administrator use in the rule?

• A. Ignore Session
• B. ignore S-TAP Session
• C. ignore SQL per Session
• D. ignore Responses per Session

Answer: B

NEW QUESTION 14
A Guardium administrator is using the Classification, Entitlement and Vulnerability assessment features of the product. Which of the following are correct with regards to these features? (Select two.)

• A. Vulnerability Assessment reports are populated to the Guardium appliance via S-TAP.
• B. Classification for databases and files use the same mechanisms and patterns to search for sensitive data.
• C. Entitlement reports are predefined database privilege reports and are populated to the Guardium appliance via S-TAP.
• D. Vulnerability Assessment identifies and helps correct security vulnerabilities and threats in the database infrastructures.
• E. The classification feature discovers sensitive assets including credit card numbers or national card numbers from various data sources.

Answer: DE

NEW QUESTION 15
A company is installing S-TAPS on new Database Clusters. The Guardium administrator was provided with the PVU load of each node. The clusters are in active/passive mode. The administrator is associating S-TAPs to Collectors using the PVU count.
How should the administrator treat the PVUs of passive nodes?

• A. include the PVU load of passive nodes.
• B. include half of the passive nodes PVU load.
• C. include a third of the passive nodes PVU load.
• D. Not include the PVU load of passive nodes.

Answer: D

NEW QUESTION 16
A Guardium administrator has rebuilt an appliance, and wants nowto restore a backup image of the entire database, audit data, and all definitions from Data backup.Which CLI command should the administrator use to accomplish this?

• A. restore config
• B. restore system
• C. restore pre-patch-backup
• D. restore certificate sniffer backup

Answer: B

NEW QUESTION 17
A company wants to deploy S-TAPs for 2 groups of database servers located in 2 different data centers. The current set of Collectors are fully utilized. The Aggregators and Central Manager can handle more load.
What should a Guardium administrator recommend?

• A. Deploy 2 new Collectors, l in each data center.
• B. Connect S-TAPs directly to Aggregators to avoid network latency.
• C. Connect S-TAPs directly to the Central Manager to avoid network latency.
• D. Deploy 2 new Collectors in the third data center located in between the 2 data centers.

Answer: A

NEW QUESTION 18
A Guardium policy has been configured with the following two rules:

A Guardium administrator is required to check for SQL statements from client IP 9.4.5.6 executed on object "TABLET.
What domain(s) can the administrator create a report in to see the SQL?

• A. Access
• B. Policy Violations
• C. Access and Access Policy
• D. Access and Policy Violations

Answer: A

NEW QUESTION 19
Guardium reports are showing multiple records with client ip as 0.0.0.0. Users are unable to identify which client the connections came from. The Guardium administrator has identified that the databases are using encryption.
Which column can the administrator add that would help users to better identify the client?

• A. Client OS
• B. Client MAC
• C. Access ID
• D. Analyzed Client IP

Answer: B

NEW QUESTION 20
A Guardium administrator is preparing commands to install or upgrade an S-TAP using the command line method. Which operating system can use the ktap_allow_module_combos parameter for the installation and upgrade?

• A. AIX
• B. Linux
• C. Solaris
• D. HP-UX

Answer: B

NEW QUESTION 21
A Guardium administrator is planning to build an environment that contains an S-TAP with one primary Collector and one failover Collector. What must the administrator ensure when setting up this environment?

• A. Both Collectors are centrally managed.
• B. There is network connectivity between the S-TAP and both Collectors.
• C. Guardium Installation Manager (GIM) is installed on the Database Server.
• D. in the guard_tap.ini file of the S-TAP set participate_in_load_balancing=l

Answer: B

NEW QUESTION 22
A Guardium administrator installed the BUNDLE-STAP module and is monitoring the state of the install. Which state requires a database server reboot to complete the installation process?

• A. Ip
• B. IP-PR
• C. FAILED
• D. PENDING-UPDATE

Answer: B

NEW QUESTION 23
......