距離 C2150-620 考試的日子越來越近，手邊的教材卻總覺得看不完？Fast2test 收錄 IBM Security Network Protection (XGS) V5.3.2 System Administration 共 60 道練習題，把通勤、午休等零碎時間都變成有效的複習時段，讓有限的備考時間發揮最大效益。

IBM C2150-620 考試概覽:

IBM C2150-620 考試大綱主題:

C2150-620 考試熱門問答集

最新的 IBM Certified System Administrator C2150-620 免費考試真題：

問題 #1

A System Administrator is planning to implement SSL Inspection for both outbound user traffic and inbound traffic to a company web server.
The requirements are as follows:
*
SSL Inspection should protect users from connections to fraudulent servers
*
Outbound SSL Inspection should be limited to select web site categories
*
Avoid having to deploy files, configurations, or certificates to user workstations The steps to implement this plan are as follows:
*
Obtain an Inspection license for the XGS
*
Obtain a certificate from a public CA and upload it to the XGS via Outbound SSL Certificates
*
Obtain the certificate and private key of the internal web server and upload it to the XGS via Inbound SSL Certificates
*
Add internal CA certificates for the company intranet to the trusted Certificate Authorities tab in Outbound SSL Inspection Settings
*
Configure Outbound SSL Inspection Settings to block connections if the server certificate is self-signed or invalid
*
Create Outbound SSL Inspection rules that inspect only specific Domain
Certificate Categories
*
Create Inbound SSL Inspection rules that only decrypt traffic destined for the internal web server II address What will happen if an internal user attempts to access the company intranet?

A. The connection will be successful and the traffic will be blocked.
B. The connection will be successful and the traffic will not be decrypted.
C. The connection will be successful and traffic will be decrypted.
D. The connection will be blocked.

問題 #2

A System Administrator wants to configure the Automated Service and Support Request feature.
Where can settings for this be configured.

A. On Local Management Interface, only after initial appliance setup is complete
B. On Local Management Interface, only during initial appliance setup
C. Command Line Interface only
D. On SiteProtector only

問題 #3

A System Administrator needs to create a pcap capture file which contains the FTP traffic inspected by the XGS and therefore has enabled the FTP_Get signature in the Default IPS Object.
Which other action needs to be performed to ensure that the desired capture file is available in the Local Management interface (LMI) for this event only?

A. Configure "Capture Connection" on the Response tab for an IPS Event Filter Policy rule for FTP_Get event.
B. Configure "Capture Connection" on the Response tab for the Default IPS Object.
C. Select "Log With Raw" on the FTP_Get signature that was enabled.
D. Enable the tools>capture>pinterface from the command line filtering by FTP_Get event.

問題 #4

The System Administrator for a bank has deployed the following Network Access Policy on the XGS appliance using default built-in Application & Inspection objects, as shown in the diagram below. No schedule objects were used in all rules.

The clients are on one side of the protection interface pair and the server are on the other side, including the gateway to internet. One user opened a browser to access
https://ibm.com. The traffic is blocked and the System Administrator opens the Network Access Events to find the events associated with the source IP address of the client.

Which Application is reported for that event?

A. https
B. tls
C. http
D. Unknown

問題 #5

Several XGS appliance were deployed in a financial company and are managed centrally by the SiteProtector system. The license files are imported into the SiteProtector system The System Administrator deployed the following policies on one XGS appliance others are intact.



All license types are available and the quantity for each is sufficient.
Which three licenses are consumed by the XGS appliance after deploying these policies without violating the compliance? (Choose three.)

A. QRader
B. Firmware and X-force Content
C. Identity and Application Control
D. Flexible Performance
E. SSL Inspection
F. IP Reputation

問題與答案：