The Secret Of IBM C2150-606 Pdf

NEW QUESTION 1
During the initial phase of the Guardium deployment, the Guardium administrator wants to figure out an ideal time period to purge data from the appliance based on the data load.
Which predefined Guardium report(s) allows the administrator to determine the current database disk usage of the Guardium Appliance?

• A. Disk UtiI report
• B. Aggregation/Archive log
• C. DB Server throughput report
• D. Buff Usage Monitor and System Monitor reports

Answer: D

NEW QUESTION 2
AGuardium administrator is checking the scheduled jobs exceptions report on a standalone Collector The following error is repeating every l5 minutes.
java.lang.NumberFormatException: empty String
The administrator also notices that the anomaly detection polling interval is l5 minutes. What should the administrator do next to contribute troubleshooting the problem?

• A. Pause all scheduled jobs and check if the exception comes back.
• B. identify the alert that is causing the problem by deactivating one alert at a time.
• C. Check in the alert builder to see which alerts have accumulation interval of l5 minutes.
• D. in the CLI run support must_gather aggjssues and send the file to IBM support.

Answer: B

NEW QUESTION 3
A company wants to deploy S-TAPs for 2 groups of database servers located in 2 different data centers. The current set of Collectors are fully utilized. The Aggregators and Central Manager can handle more load.
What should a Guardium administrator recommend?

• A. Deploy 2 new Collectors, l in each data center.
• B. Connect S-TAPs directly to Aggregators to avoid network latency.
• C. Connect S-TAPs directly to the Central Manager to avoid network latency.
• D. Deploy 2 new Collectors in the third data center located in between the 2 data centers.

Answer: A

NEW QUESTION 4
The Quick Search window does not show up on the GUI of a standalone Collector What technical feature should the Guardium administrator check first?

• A. That the Collector has at least 24 GB.
• B. That the Collector has at least 32 GB.
• C. That the Collector has at least 64 GB.
• D. Check the contract and verify whether that feature was purchased.

Answer: A

NEW QUESTION 5
A Guardium administrator needs to monitor changes to the Oracle configuration file on a production Oracle database server. Assuming all valid licenses are applied, which Guardium component does the administrator need to install and where?

• A. Guardium Installation Manager (GIM) on the Database Server
• B. Configuration Auditing System (CAS) on the Database Server.
• C. Configuration Auditing System (CAS) on the Guardium Collector.
• D. Configuration Auditing System (CAS) on the Database Server and on the Guardium Collector.

Answer: D

NEW QUESTION 6
A Guardium administrator needs to check the traceroute information between one appliance and its Central Manager. Which CLI command should the administrator run?

• A. iptraf
• B. support show iptables
• C. show network routes operational
• D. support must_gather network_issues

Answer: D

NEW QUESTION 7
A Guardium administrator observes certain changes to the configuration and policies. How would the administrator identify the changes that were made and who made them?

• A. Review the Audit Process Log report.
• B. Review the sniffer buffer usage report.
• C. Review the /var/log/messages log file.
• D. Review the results of 'Detailed Guardium User Activity' report.

Answer: D

NEW QUESTION 8
After a successful purge, a Guardium administrator observes that the full percentage of the Guardium internal database is not decreasing. The administrator uses support show db-top-tables all and finds the size of the largest tables has decreased significantly.
What should the administrator do?

• A. Increase the retention period and rerun the purge.
• B. Rebuild the appliance and restore from the backup.
• C. Login to CLI and execute stop inspection-core.
• D. Optimize the internal TURBINE database using diag CLI command.

Answer: D

NEW QUESTION 9
A Guardium administrator installed the BUNDLE-STAP module and is monitoring the state of the install. Which state requires a database server reboot to complete the installation process?

• A. Ip
• B. IP-PR
• C. FAILED
• D. PENDING-UPDATE

Answer: B

NEW QUESTION 10
The last Vulnerability Assessment tests performed in a company were run one year ago. The company wants to ensure the Vulnerability Assessment tests keep up with the latest database common vulnerabilities. The company wants to use the Guardium default tests instead of customer designed tests.
What should the Guardium administrator do to update the tests that will be run?

• A. install the latest patch on the Guardium appliance.
• B. Install the latest released Database Activity Monitor Content.
• C. Ask the database administrators to provide the default tests.
• D. Ask the Company Security Provider to supply the default tests

Answer: B

NEW QUESTION 11
An administrator previously had an issue with a Guardium system. This was resolved with the assistance from the IBM Guardium support team, who provided the shell script, a CLI command and the encrypted key to execute the uploaded shell script.
Which CLI command should the administrator use to review the commands that were previously run?

• A. fjieserver
• B. support execute showlog
• C. show log external state
• D. support must_gather system_db_info

Answer: B

NEW QUESTION 12
Simple Mail Transfer Protocol (SMTP) has recently been configured on a Guardium appliance. How can the administrator confirm the configuration is correct? (Select 2)

• A. Restart the Anomaly detection process
• B. Send a test email with CLI diag command
• C. From the GUI Alerter page, test the SMTP connection
• D. Create a query in access domain to see the sent messages
• E. Obtain the syslog file from fileserver and check for SMTP messages

Answer: BC

NEW QUESTION 13
A Guardium administrator needs to install and configure a physical appliance to ensure network redundancy. Which port should the administrator use to configure IP teaming (bonding)?

• A. ethl only
• B. eth2 only
• C. eth3 only
• D. any port

Answer: D

NEW QUESTION 14
While looking at the S-TAP Status report on a Collector, a Guardium administrator notices that the status of the S-TAPs is changing every few minutes. The administrator suspects that the sniffer is restarting every few minutes and that is why the status change is happening.
How can the Guardium administrator confirm if the sniffer is restarting every few minutes?

• A. Review the Audit Process Log for 'Sniffer stopped' message.
• B. Review the Aggregation/Archive Log for 'Sniffer is restarting message.
• C. Review the Scheduled Jobs Exceptions for 'Sniffer process failed' message.
• D. Review the Buff Usage Monitor for the column TID to see if it changed every few minutes.

Answer: D

NEW QUESTION 15
AGuardium administrator is registering a new Collector to a Central Manager (CM). The registration failed. As part of the investigation, the administrator wants to identify if the firewall ports are open-How can the administrator do this?

• A. Ask the company's network administrators.
• B. Ask IBM technical support to login as root and verify.
• C. Login as CLI and execute telnet <ip address> <port number>
• D. Login as CLI and execute support show port open <ip address> <port number>

Answer: D

NEW QUESTION 16
During a Guardium deployment planning meeting, the team decides to deploy all S-TAP agents on all Unix/Linux database systems. A Unix/Linux system administrator team manager asks a Guardium administrator if there are any differences between Guardium S-TAPs for AIX and Linux systems that the team should be aware of.
What should be the Guardium administrator's response?

• A. A-TAP is required on all AIX DB Servers.
• B. a server reboot is required to capture shared memory traffic from all databases on AIX.
• C. K-TAP is required on the AIX DB server
• D. The exact uname -a output is required to determine the correct K-TAP module for the server.
• E. K-TAP is required on the Linux DB server
• F. The exact uname -a output is required to determine the correct K-TAP module for the server.

Answer: B

NEW QUESTION 17
A Guardium administrator is preparing a command to install Configuration Auditing System (CAS) on a Linux server using the command line method. Which parameter is required?

• A. dir
• B. tapip
• C. java-home
• D. sqlguardip

Answer: D

NEW QUESTION 18
In a centrally managed environment, while executing the report 'Enterprise Buffer Usage Monitor', a Guardium administrator gets an empty report. Why is the report empty?

• A. Sniffers are not running on the Collectors.
• B. The report is not executed with a remote source on the Collector.
• C. The report is not executed with a remote source on the Aggregator.
• D. Correct custom table upload is not scheduled on the Central Manager.

Answer: C

NEW QUESTION 19
A Guardium administrator needs to use both CLI and GrdAPI functions to manage the system.
Which are the two commands that the administrator can use to search for the required commands and their syntax from within either CLI or GrdAPI?

• A. CLI: commands <search option> GrdApi: grdapi <search option> --help
• B. CLI: help <search option> GrdApi: grdapi --help <search option>
• C. CLI: commands <search option> GrdAPI: grdapi command <search option>
• D. CLI: <search option> -help GrdApi: grdapi <search option> -help=true

Answer: D

NEW QUESTION 20
During a Guardium deployment planning meeting, a database administrator indicated that the mission critical databases were clustered. How should the Guardium administrator handle S-TAP installation and configuration with respect to clustered databases?

• A. Install S-TAP agents on all active node
• B. Set ALL_CAN_CONTROL=l to failover the S-TAP process to the passive nodes when a database failover occurs.
• C. install S-TAP agents on all active nodes Set WAIT_FOR_DB_EXEC=-l to set the agent process to failover to the passive node when a database failover occurs.
• D. Install S-TAP agents on all active and passive node
• E. Set ALL_CAN_CONTROL=0 to disable all passive nodes until a database failover occurs.
• F. Install S-TAP agents on all active and passive nodes: Set WAIT_FOR_DB_EXEC>0 on all nodes to start S-TAP processes without waiting for a correct DB home.

Answer: A

NEW QUESTION 21
A Guardium administrator is planning to build an environment that contains an S-TAP with one primary Collector and one failover Collector. What must the administrator ensure when setting up this environment?

• A. Both Collectors are centrally managed.
• B. There is network connectivity between the S-TAP and both Collectors.
• C. Guardium Installation Manager (GIM) is installed on the Database Server.
• D. in the guard_tap.ini file of the S-TAP set participate_in_load_balancing=l

Answer: B

NEW QUESTION 22
AGuardium administrator just finished installing the Guardium product to build a Collector. The administrator wants to make sure the Collector has the licenses needed to provide functionality for data activity monitoring, masking and blocking (terminate).
Which of the following lists the minimum licenses the administrator needs to install?

• A. Base Collector license.
• B. None, the licenses required are already installed automatically by the Guardium product installer.
• C. Base Collector license plus IBM Security Guardium Standard Activity Monitor for Databases (DAM Standard).
• D. Base Collector license plus IBM Security Guardium Advanced Activity Monitor for Databases (DAM Advanced).

Answer: D

NEW QUESTION 23
A Guardium administrator is setting up a Collector schedule to export data to an Aggregator and Archive its data to an Archive storage unit for additional data safety.
Given this scenario, which is true regarding the purge schedule?

• A. The Archive and the Export have independent purge schedules but should not be run at the same time.
• B. The Guardium unit would run the Export and Archive before any purge, so you would only see the last purge run each day.
• C. it would not be possible to configure both on a Collector, the Aggregator should do the archiving and only export from the Collector.
• D. Any time that Data Export and Data Archive are both configured, the purge age must be greater than both the age at which to export and the age at which to archive.

Answer: D

NEW QUESTION 24
......