最新的IBM C2090-463免費考試真題

問題1

Which action should be used to ignore activity from users or applications that are producing a high volume of network traffic?

A. Skip logging

B. Ignore S-TAP session

C. Ignore SQLper session

D. Audit Only

正確答案: B

問題2

Which report statement is true?

A. You should not use tuple groups in reports.

B. You can run a report using the compliance work flow automation application.

C. You cannot create a report with both the "IP" and "SQL" attribute.

D. You can modify the layout of "out of the box" reports.

正確答案: B

問題3

Which ports are used by Windows S-TAP?

A. 16016 TCP (unencrypted) and 16018 TCP (encrypted)

B. 16016 TCP (unencrypted) and 16018 UDP (heartbeat signal)

C. 9500 TCP (unencrypted) and 8075 UDP (heartbeat signal)

D. 9500 TCP (unencrypted) and 8075 TCP (encrypted)

正確答案: C

問題4

An audit workflow process may contain any number of audit tasks. Whichis NOT a valid audit task?

A. a policy process

B. a privacy set

C. a security assessment

D. a classification process

正確答案: A

問題5

Which parameter should be used to enable K-TAP flex loading through GIM?

A. KTAP_LIVE_UPDATE set to "Y"

B. KTAP_ENABLED set to "1"

C. KTAP_ALLOW_MODULE_COMBOS set to "Y"

D. KTAP_FAST_FILE_VERDICT set to "1"

正確答案: C

問題6

Which account can reset the user's role GUI layout?

A. Admin

B. Accessmgr

C. INV

D. cli

正確答案: B

問題7

When building a Virtual Appliance there memory recommendations (RAM) that need to be taken into account. What is the present maximum memory limit for such an appliance in GigaBytes (GB)?

A. Maximum 18 GB of memory

B. Maximum 24 GB of memory

C. Maximum 16 GB of memory

D. There is no maximum limit

正確答案: C

問題8

What is the correct way to stop S-TAP that is managed by GIM?

A. Uninstall S-TAP.

B. Comment S-TAP entry in /etc/inittab.

C. Use kill -9 onS-TAP process.

D. Set STAP_ENABLED to "0" in GIM parameters.

正確答案: D

問題9

What query change requires the report portlet to be regenerated?

A. Timestamp attributes

B. Query fields

C. Runtime parameters

D. Main entity

正確答案: C

問題10

What is the difference between real time alerts and correlation alerts?

A. There is no difference, terminology is used interchangeably.

B. Real time alerts are based on policy rules. Correlation alerts are Querybased.

C. Real time alerts could only be run on the Managed Units. Correlation alerts can only be run on Central Manager.

D. Real time alerts are driven by anomaly detection. Correlation alerts are policy driven.

正確答案: B

最新的IBM InfoSphere Guardium - C2090-463免費考試真題

聯系我們

站內鏈接

最新更新