IBM P2150-739 - IBM InfoSphere Guardium Technical Mastery Test v2 Exam
Page: 3 / 9
Total 43 questions
Question #11 (Topic: )
Which of the following is not a valid termination action for an extrusion rule?
A. Termination actions are not available for extrusion rules.
B. S-TAP Terminate.
C. Termination actions are available for extrusion rules, however these are executed by the database management system and not Guardium.
D. S-GATE Terminate.
Answer: D
Question #12 (Topic: )
A developer has recently created a temporary database to test her new human resources
management application. To test it in a production-like environment she copies the
MANAGERS table from the production server into her test database. This table includes
sensitive personal information. Which of the following will help the database auditor identify
this new database?
management application. To test it in a production-like environment she copies the
MANAGERS table from the production server into her test database. This table includes
sensitive personal information. Which of the following will help the database auditor identify
this new database?
A. The database auditor can be notified by e-mail using Guardium's scheduled database auto-discovery feature.
B. The developer must create the new database using Guardium's Application Events API, which would show up on the Guardium interface as a change report.
C. The database auditor can be notified of new sensitive data by a previously scheduled sensitive object discovery job.
D. The auditor cannot incorporate the new environment into Guardium unless she is given the exact details of the database and host system.
Answer: A
Question #13 (Topic: )
What is Guardium's Database Protection Subscription Service?
A. A service that may be purchased separately in order to enable Guardium to safeguard database management systems other than Sybase AES.
B. A subscription to the latest updates for the various Guardium product components.
C. An additional package required for the vulnerability and threat management solutions to integrate with CAS.
D. A service that provides the Guardium instance with quarterly updates to its built-in assessment tests, so the assessment is up-to-date with industry best practices and new vulnerabilities.
Answer: D
Question #14 (Topic: )
Which of the following is true about Guardium's entitlement reports?
A. Guardium includes a set of built-in entitlement report definitions for all supported databases.
B. Guardium does not offer standard built-in entitlement reports and the user must create these reports based on their database specifications.
C. Guardium includes Oracle entitlement reports as a standard feature, however reports for all other database engines (ie. IBM DB2) must be manually created.
D. Guardium's entitlement reporting requires a monthly subscription service.
Answer: A
Question #15 (Topic: )
What does "Auditing" mean in Guardium?
A. The process of logging monitored database activity as defined by the installed security policy, creation of reports from logged data based on audit requirements, and review of the report as part of an audit process.
B. Applying a group of data server configuration changes that allow the different versions of Guardium to safeguard sensitive information.
C. The granting of every available privilege to a few selected users so they can take over several servers using the Guardium UI and audit these servers.
D. Importing a set of special stored procedures into many data servers to determine the security state of the database configurations.
Answer: A
