IBM C1000-197 問題練習

Question No : 1
Where can data archived on an aggregator be restored?

• A.On any collector
• B.On any aggregator
• C.On a standalone collector
• D.On a collector that was exported to the aggregator

答えを確認する

正解:

Question No : 2
How can Guardium administrators ensure secure communication between S-TAP agents and collectors? (Choose two)

• A.Route all agent traffic through central managers
• B.Configure shared keys between S-TAPs and aggregators
• C.Verify that collectors have trusted certificates installed
• D.Enable TLS encryption for all S-TAP to collector traffic

答えを確認する

正解:

Question No : 3
Where should administrators verify appliance health immediately after completing patch or firmware maintenance? (Choose two)

• A.Appliance health monitoring dashboard
• B.System logs for errors or warnings
• C.LDAP integration report
• D.Policy violation report

答えを確認する

正解:

Question No : 4
Why is it important to synchronize Guardium appliances with an NTP server?

• A.To automatically reset appliance passwords on schedule
• B.To ensure logs and reports have consistent timestamps across appliances
• C.To control CPU frequency for performance optimization
• D.To trigger database discovery scans at fixed intervals

答えを確認する

正解:

Question No : 5
Which two Guardium features support ongoing policy maintenance across multiple appliances? (Choose two)

• A.Central manager policy distribution
• B.Aggregator synchronization jobs
• C.Database discovery scans
• D.Policy versioning and history tracking

答えを確認する

正解:

Question No : 6
Which Guardium feature allows administrators to track who modified a policy and when the modification was applied?

• A.Report builder activity logs
• B.Aggregator synchronization report
• C.Policy builder audit trail
• D.S-TAP connection history

答えを確認する

正解:

Question No : 7
Why is it important to group monitored databases logically within Guardium after deployment?

• A.To simplify administration and apply policies consistently
• B.To allow databases to share encryption keys
• C.To ensure databases automatically inherit license types
• D.To reduce storage space requirements

答えを確認する

正解:

Question No : 8
What type of Guardium policy action should be configured to immediately block risky queries while still capturing them for audit purposes?

• A.Alert only
• B.Log only
• C.Alert and block
• D.Ignore

答えを確認する

正解:

Question No : 9
Which two report outputs can be scheduled and distributed automatically from Guardium to stakeholders? (Choose two)

• A.Appliance firmware logs sent to vendors
• B.CSV reports exported to external storage
• C.PDF reports emailed to compliance teams
• D.Raw syslog data shared with database users

答えを確認する

正解:

Question No : 10
Where should anomaly detection be enabled in Guardium to ensure monitoring covers all traffic sources effectively?

• A.On collectors where activity is captured
• B.On central manager only
• C.On aggregators exclusively
• D.On database servers directly

答えを確認する

正解:

Question No : 11
What is the main reason to purge data in the Guardium system?

• A.Speed up access operations on the internal database
• B.To avoid adding disk partitions for the internal database
• C.GDPR security compliance reasons for internal database
• D.Minimize the risk to access sensitive data in the internal database

答えを確認する

正解:

Question No : 12
Which two system health checks should administrators perform before upgrading Guardium firmware? (Choose two)

• A.Verify backup completion of current configuration
• B.Check free storage space availability
• C.Disable all security policies temporarily
• D.Uninstall all S-TAP agents

答えを確認する

正解:

Question No : 13
Which two (2) databases support Exit libraries as a monitoring mechanism?

• A.DB2
• B.Oracle
• C.Informix
• D.MongoDB
• E.SQL Server

答えを確認する

正解:

Question No : 14
What two steps should administrators take when maintaining Guardium policies to adapt to changing threats? (Choose two)

• A.Disable all existing policies before updates
• B.Require firmware reinstallation each time
• C.Review policy violation trends regularly
• D.Adjust policy rules based on new database risks

答えを確認する

正解:

Question No : 15
Who should administrators involve when Guardium alerts consistently fail to reach the enterprise SIEM platform?

• A.Database application developers
• B.Network/security operations team
• C.End users of monitored databases
• D.Appliance hardware vendor

答えを確認する

正解: