C1000-197 시험 - IBM실제시험문제와 답 - 120문항

Question No : 1

Where can data archived on an aggregator be restored?

A.On any collector
B.On any aggregator
C.On a standalone collector
D.On a collector that was exported to the aggregator

정답:

Question No : 2

How can Guardium administrators ensure secure communication between S-TAP agents and collectors? (Choose two)

A.Route all agent traffic through central managers
B.Configure shared keys between S-TAPs and aggregators
C.Verify that collectors have trusted certificates installed
D.Enable TLS encryption for all S-TAP to collector traffic

정답:

Question No : 3

Where should administrators verify appliance health immediately after completing patch or firmware maintenance? (Choose two)

A.Appliance health monitoring dashboard
B.System logs for errors or warnings
C.LDAP integration report
D.Policy violation report

정답:

Question No : 4

Why is it important to synchronize Guardium appliances with an NTP server?

A.To automatically reset appliance passwords on schedule
B.To ensure logs and reports have consistent timestamps across appliances
C.To control CPU frequency for performance optimization
D.To trigger database discovery scans at fixed intervals

정답:

Question No : 5

Which two Guardium features support ongoing policy maintenance across multiple appliances? (Choose two)

A.Central manager policy distribution
B.Aggregator synchronization jobs
C.Database discovery scans
D.Policy versioning and history tracking

정답:

Question No : 6

Which Guardium feature allows administrators to track who modified a policy and when the modification was applied?

A.Report builder activity logs
B.Aggregator synchronization report
C.Policy builder audit trail
D.S-TAP connection history

정답:

Question No : 7

Why is it important to group monitored databases logically within Guardium after deployment?

A.To simplify administration and apply policies consistently
B.To allow databases to share encryption keys
C.To ensure databases automatically inherit license types
D.To reduce storage space requirements

정답:

Question No : 8

What type of Guardium policy action should be configured to immediately block risky queries while still capturing them for audit purposes?

A.Alert only
B.Log only
C.Alert and block
D.Ignore

정답:

Question No : 9

Which two report outputs can be scheduled and distributed automatically from Guardium to stakeholders? (Choose two)

A.Appliance firmware logs sent to vendors
B.CSV reports exported to external storage
C.PDF reports emailed to compliance teams
D.Raw syslog data shared with database users

정답:

Question No : 10

Where should anomaly detection be enabled in Guardium to ensure monitoring covers all traffic sources effectively?

A.On collectors where activity is captured
B.On central manager only
C.On aggregators exclusively
D.On database servers directly

정답:

Question No : 11

What is the main reason to purge data in the Guardium system?

A.Speed up access operations on the internal database
B.To avoid adding disk partitions for the internal database
C.GDPR security compliance reasons for internal database
D.Minimize the risk to access sensitive data in the internal database

정답:

Question No : 12

Which two system health checks should administrators perform before upgrading Guardium firmware? (Choose two)

A.Verify backup completion of current configuration
B.Check free storage space availability
C.Disable all security policies temporarily
D.Uninstall all S-TAP agents

정답:

Question No : 13

Which two (2) databases support Exit libraries as a monitoring mechanism?

A.DB2
B.Oracle
C.Informix
D.MongoDB
E.SQL Server

정답:

Question No : 14

What two steps should administrators take when maintaining Guardium policies to adapt to changing threats? (Choose two)

A.Disable all existing policies before updates
B.Require firmware reinstallation each time
C.Review policy violation trends regularly
D.Adjust policy rules based on new database risks

정답:

Question No : 15

Who should administrators involve when Guardium alerts consistently fail to reach the enterprise SIEM platform?

A.Database application developers
B.Network/security operations team
C.End users of monitored databases
D.Appliance hardware vendor

정답:

IBM C1000-197 시험