C2150-606 Online Practice Questions and Answers

A company wants to deploy S-TAPs for 2 groups of database servers located in 2 different data centers. The current set of Collectors are fully utilized. The Aggregators and Central Manager can handle more load.

What should a Guardium administrator recommend?

A. Deploy 2 new Collectors, 1 in each data center.

B. Connect S-TAPs directly to Aggregators to avoid network latency.

C. Connect S-TAPs directly to the Central Manager to avoid network latency.

D. Deploy 2 new Collectors in the third data center located in between the 2 data centers.

Auditors request a report of all unsuccessful login attempts to a database monitored by Guardium. How should a Guardium administrator create such a report?

A. Add a failed login rule to the policy.

B. Create a failed login query and report using access domain in Guardium.

C. Create a failed login query and report using exceptions domain in Guardium.

D. Create a failed login query and report using application data domain in Guardium.

A Guardium administrator needs to check the traceroute information between one appliance and its Central Manager. Which CLI command should the administrator run?

A. iptraf

B. support show iptables

C. show network routes operational

D. support must_gather network_issues

A Guardium administrator needs to monitor changes to the Oracle configuration file on a production Oracle database server. Assuming all valid licenses are applied, which Guardium component does the administrator need to install and where?

A. Guardium Installation Manager (GIM) on the Database Server

B. Configuration Auditing System (CAS) on the Database Server.

C. Configuration Auditing System (CAS) on the Guardium Collector.

D. Configuration Auditing System (CAS) on the Database Server and on the Guardium Collector.

A Guardium policy has been configured with the following two rules:

AGuardium administrator is required to check for SQL statements from client IP 9.4.5.6 executed on object "TABLET. What domain(s) can the administrator create a report in to see the SQL?

A. Access

B. Policy Violations

C. Access and Access Policy

D. Access and Policy Violations

AGuardium administrator is registering a new Collector to a Central Manager (CM). The registration failed. As part of the investigation, the administrator wants to identify if the firewall ports are open-How can the administrator do this?

A. Ask the company's network administrators.

B. Ask IBM technical support to login as root and verify.

C. Login as CLI and execute telnet

D. Login as CLI and execute support show port open

A Guardium administrator handles a large environment and has been asked to restore old data for auditors to review. This old data needs to be restored so that it does not impact the current data being collected or any merge settings. In order to keep the reports separate (old datavs current data), the administrator sets up an Investigation Center.

Which is a key requirement for users of the Investigation Center?

A. The user must be in one of the groups INV_1, INV_2, or INV_3 (case-sensitive).

B. The users must login as one of the predefined user accounts INV_1, INV_2, orlNV_3 (case-sensitive).

C. A separate user must be used with a role of either INV_1, INV_2, or INV_3 (case- sensitive).

D. To correctly configure an investigation user, the user's Last Name must be set to the name of one of the three investigation databases, INV_1, INV_2, or INV_3 (case-sensitive).

A Guardium administrator manages portal user synchronization by using a Central Manager.

When a change is made on the Central Manager such as, for example, adding a Guardium user to a Guardium group, how long should be allowed for the update to be synced with the managed units in a fully working environment?

A. 0minutes

B. 15 minutes

C. 30 minutes

D. 60 minutes

A Guardium administrator noticed that while the data activity monitoring is working fine, the Guardium appliance is slower than usual. The administrator wants to check the current CPU load of the Guardium appliance.

Which predefined Guardium report(s) allows the administrator to determine the current system CPU load of the Guardium Appliance?

A. CPU Util report

B. CPU Tracker report

C. Unit summary and CPU Util report

D. Buff Usage Monitor and System monitor report

During a Guardium deployment planning meeting, a database administrator indicated that the mission critical databases were clustered. How should the Guardium administrator handle S-TAP installation and configuration with respect to clustered databases?

A. Install S-TAP agents on all active nodes. Set ALL_CAN_CONTROL=1 to failover the S- TAP process to the passive nodes when a database failover occurs.

B. install S-TAP agents on all active nodes Set WAIT_FOR_DB_EXEC=-1 to set the agent process to failover to the passive node when a database failover occurs.

C. Install S-TAP agents on all active and passive nodes. Set ALL_CAN_CONTROL=0 to disable all passive nodes until a database failover occurs.

D. Install S-TAP agents on all active and passive nodes: Set WAIT_FOR_DB_EXEC>0 on all nodes to start S-TAP processes without waiting for a correct DB home.