C1000-197 実際試験問題と解答 - 模擬練習 - 受験自信を増やす

Question No : 1
Where can data archived on an aggregator be restored?

A.On any collector
B.On any aggregator
C.On a standalone collector
D.On a collector that was exported to the aggregator

正解:

Question No : 2
How can Guardium administrators ensure secure communication between S-TAP agents and collectors? (Choose two)

A.Route all agent traffic through central managers
B.Configure shared keys between S-TAPs and aggregators
C.Verify that collectors have trusted certificates installed
D.Enable TLS encryption for all S-TAP to collector traffic

正解:

Question No : 3
Where should administrators verify appliance health immediately after completing patch or firmware maintenance? (Choose two)

A.Appliance health monitoring dashboard
B.System logs for errors or warnings
C.LDAP integration report
D.Policy violation report

正解:

Question No : 4
Why is it important to synchronize Guardium appliances with an NTP server?

A.To automatically reset appliance passwords on schedule
B.To ensure logs and reports have consistent timestamps across appliances
C.To control CPU frequency for performance optimization
D.To trigger database discovery scans at fixed intervals

正解:

Question No : 5
Which two Guardium features support ongoing policy maintenance across multiple appliances? (Choose two)

A.Central manager policy distribution
B.Aggregator synchronization jobs
C.Database discovery scans
D.Policy versioning and history tracking

正解:

Question No : 6
Which Guardium feature allows administrators to track who modified a policy and when the modification was applied?

A.Report builder activity logs
B.Aggregator synchronization report
C.Policy builder audit trail
D.S-TAP connection history

正解:

Question No : 7
Why is it important to group monitored databases logically within Guardium after deployment?

A.To simplify administration and apply policies consistently
B.To allow databases to share encryption keys
C.To ensure databases automatically inherit license types
D.To reduce storage space requirements

正解:

Question No : 8
What type of Guardium policy action should be configured to immediately block risky queries while still capturing them for audit purposes?

A.Alert only
B.Log only
C.Alert and block
D.Ignore

正解:

Question No : 9
Which two report outputs can be scheduled and distributed automatically from Guardium to stakeholders? (Choose two)

A.Appliance firmware logs sent to vendors
B.CSV reports exported to external storage
C.PDF reports emailed to compliance teams
D.Raw syslog data shared with database users

正解:

Question No : 10
Where should anomaly detection be enabled in Guardium to ensure monitoring covers all traffic sources effectively?

A.On collectors where activity is captured
B.On central manager only
C.On aggregators exclusively
D.On database servers directly

正解:

Question No : 11
What is the main reason to purge data in the Guardium system?

A.Speed up access operations on the internal database
B.To avoid adding disk partitions for the internal database
C.GDPR security compliance reasons for internal database
D.Minimize the risk to access sensitive data in the internal database

正解:

Question No : 12
Which two system health checks should administrators perform before upgrading Guardium firmware? (Choose two)

A.Verify backup completion of current configuration
B.Check free storage space availability
C.Disable all security policies temporarily
D.Uninstall all S-TAP agents

正解:

Question No : 13
Which two (2) databases support Exit libraries as a monitoring mechanism?

A.DB2
B.Oracle
C.Informix
D.MongoDB
E.SQL Server

正解:

Question No : 14
What two steps should administrators take when maintaining Guardium policies to adapt to changing threats? (Choose two)

A.Disable all existing policies before updates
B.Require firmware reinstallation each time
C.Review policy violation trends regularly
D.Adjust policy rules based on new database risks

正解:

Question No : 15
Who should administrators involve when Guardium alerts consistently fail to reach the enterprise SIEM platform?

A.Database application developers
B.Network/security operations team
C.End users of monitored databases
D.Appliance hardware vendor

正解:

IBM C1000-197 問題練習