NEW QUESTION 1
Which use cases are covered with the File Activity Monitoring feature? (Select two.)

• A. Classify sensitive files on mainframe systems.
• B. Encrypts database data files on file systems based on policies.
• C. Selectively redacts sensitive data patterns in files based on policies.
• D. Provides audit trail of access to files, alert and/or block when unauthorized users or processes attempt access.
• E. Identifies files containing Personally Identifiable Information (Pll) or proprietary confidential information on Linux Unix Windows (LUW) systems.

Answer: AE

NEW QUESTION 2
Simple Mail Transfer Protocol (SMTP) has recently been configured on a Guardium appliance. How can the administrator confirm the configuration is correct? (Select 2)

• A. Restart the Anomaly detection process
• B. Send a test email with CLI diag command
• C. From the GUI Alerter page, test the SMTP connection
• D. Create a query in access domain to see the sent messages
• E. Obtain the syslog file from fileserver and check for SMTP messages

Answer: BC

NEW QUESTION 3
An administrator previously had an issue with a Guardium system. This was resolved with the assistance from the IBM Guardium support team, who provided the shell script, a CLI command and the encrypted key to execute the uploaded shell script.
Which CLI command should the administrator use to review the commands that were previously run?

• A. fjieserver
• B. support execute showlog
• C. show log external state
• D. support must_gather system_db_info

Answer: B

NEW QUESTION 4
A Guardium administrator needs to monitor an Oracle database on a production database server.
Which component does the administrator need to install on this database server that will monitor the traffic?

• A. S-TAP
• B. Guardium Collector
• C. Guardium Installation Manager (GIM)
• D. Configuration Auditing System (CAS)

Answer: D

NEW QUESTION 5
AGuardium administrator is registering a new Collector to a Central Manager (CM). The registration failed. As part of the investigation, the administrator wants to identify if the firewall ports are open-How can the administrator do this?

• A. Ask the company's network administrators.
• B. Ask IBM technical support to login as root and verify.
• C. Login as CLI and execute telnet <ip address> <port number>
• D. Login as CLI and execute support show port open <ip address> <port number>

Answer: D

NEW QUESTION 6
AGuardium administrator needs to upgrade BUNDLE-STAP on a Linux server to the latest version using GIM. What parameter should the administrator set to ensure the upgrade will not require a reboot of the server?

• A. KTAP_ENABLED=l
• B. KTAP_NO_ROLLBACK=l
• C. KTAP_LIVE_UPDATE=Y
• D. KTAP_ALLOW_MODULE_COMBOS=Y

Answer: C

NEW QUESTION 7
A Guardium administrator installed the BUNDLE-STAP module and is monitoring the state of the install. Which state requires a database server reboot to complete the installation process?

• A. Ip
• B. IP-PR
• C. FAILED
• D. PENDING-UPDATE

Answer: B

NEW QUESTION 8
In a centrally managed environment, while executing the report 'Enterprise Buffer Usage Monitor', a Guardium administrator gets an empty report. Why is the report empty?

• A. Sniffers are not running on the Collectors.
• B. The report is not executed with a remote source on the Collector.
• C. The report is not executed with a remote source on the Aggregator.
• D. Correct custom table upload is not scheduled on the Central Manager.

Answer: C

NEW QUESTION 9
During the initial phase of the Guardium deployment, the Guardium administrator wants to figure out an ideal time period to purge data from the appliance based on the data load.
Which predefined Guardium report(s) allows the administrator to determine the current database disk usage of the Guardium Appliance?

• A. Disk UtiI report
• B. Aggregation/Archive log
• C. DB Server throughput report
• D. Buff Usage Monitor and System Monitor reports

Answer: D

NEW QUESTION 10
A company has recently acquired Guardium software entitlement to help meet their upcoming PCI-DSS audit requirements. The company is entitled to Standard Guardium DAM offering.
Which of the following features can the Guardium administrator use with the current entitlement? (Select two.)

• A. Run Vulnerability Assessment reports
• B. Generate audit reports using PCI-DSS Accelerator
• C. Block and quarantine an unauthorized database connection
• D. Mask sensitive PCI-DSS information from web application interface
• E. Log and alert all database activities that access PCI-DSS Sensitive Objects.

Answer: AB

NEW QUESTION 11
A Guardium administrator manages portal user synchronization by using a Central Manager.
When a change is made on the Central Manager such as, for example, adding a Guardium user to a Guardium group, how long should be allowed for the update to be synced with the managed units in a fully working environment?

• A. 0 minutes
• B. l5 minutes
• C. 30 minutes
• D. 60 minutes

Answer: D

NEW QUESTION 12
A Guardium administrator is setting up a Collector schedule to export data to an Aggregator and Archive its data to an Archive storage unit for additional data safety.
Given this scenario, which is true regarding the purge schedule?

• A. The Archive and the Export have independent purge schedules but should not be run at the same time.
• B. The Guardium unit would run the Export and Archive before any purge, so you would only see the last purge run each day.
• C. it would not be possible to configure both on a Collector, the Aggregator should do the archiving and only export from the Collector.
• D. Any time that Data Export and Data Archive are both configured, the purge age must be greater than both the age at which to export and the age at which to archive.

Answer: D

NEW QUESTION 13
A Guardium administrator is preparing commands to install or upgrade an S-TAP using the command line method. Which operating system can use the ktap_allow_module_combos parameter for the installation and upgrade?

• A. AIX
• B. Linux
• C. Solaris
• D. HP-UX

Answer: B

NEW QUESTION 14
A Guardium administrator is planning to build an environment that contains an S-TAP with one primary Collector and one failover Collector. What must the administrator ensure when setting up this environment?

• A. Both Collectors are centrally managed.
• B. There is network connectivity between the S-TAP and both Collectors.
• C. Guardium Installation Manager (GIM) is installed on the Database Server.
• D. in the guard_tap.ini file of the S-TAP set participate_in_load_balancing=l

Answer: B

NEW QUESTION 15
A Guardium administrator is creating a policy to alert on actions by users that are stored on an LDAP server. How can the administrator populate a group to use in the policy?

• A. Schedule the LDAP user import into the group.
• B. Schedule the LDAP user import from accessmgr and run portal user sync.
• C. Schedule the LDAP user import from accessmgr and populate the group from a query.
• D. Populate the group from a query in access domain with a condition on the LDAP server as the Server IP.

Answer: C

NEW QUESTION 16
A Guardium administrator needs to use both CLI and GrdAPI functions to manage the system.
Which are the two commands that the administrator can use to search for the required commands and their syntax from within either CLI or GrdAPI?

• A. CLI: commands <search option> GrdApi: grdapi <search option> --help
• B. CLI: help <search option> GrdApi: grdapi --help <search option>
• C. CLI: commands <search option> GrdAPI: grdapi command <search option>
• D. CLI: <search option> -help GrdApi: grdapi <search option> -help=true

Answer: D

NEW QUESTION 17
A Guardium administrator must configure real time policy alerts to be sent to a remote SIEM for every SQL statement run on a sensitive object. There is no requirement for the data to be viewed or reported on in the Guardium appliance.
Which policy action would achieve that task and store the least amount of data in the Guardium internal database?

• A. Log Only
• B. Alert Only
• C. Alert Daily
• D. Alert Per Match

Answer: C

NEW QUESTION 18
A Guardium administrator needs to monitor changes to the Oracle configuration file on a production Oracle database server. Assuming all valid licenses are applied, which Guardium component does the administrator need to install and where?

• A. Guardium Installation Manager (GIM) on the Database Server
• B. Configuration Auditing System (CAS) on the Database Server.
• C. Configuration Auditing System (CAS) on the Guardium Collector.
• D. Configuration Auditing System (CAS) on the Database Server and on the Guardium Collector.

Answer: D

NEW QUESTION 19
Guardium reports are showing multiple records with client ip as 0.0.0.0. Users are unable to identify which client the connections came from. The Guardium administrator has identified that the databases are using encryption.
Which column can the administrator add that would help users to better identify the client?

• A. Client OS
• B. Client MAC
• C. Access ID
• D. Analyzed Client IP

Answer: B

NEW QUESTION 20
A Guardium administrator is preparing a command to install Configuration Auditing System (CAS) on a Linux server using the command line method. Which parameter is required?

• A. dir
• B. tapip
• C. java-home
• D. sqlguardip

Answer: D

NEW QUESTION 21
......