IBM Certified Guardium Data Protection C1000-197 Dumps

Prévia do material em texto

Download IBM C1000-197 Exam Dumps for Best Preparation
1 / 5
Exam : C1000-197
Title :
https://www.passcert.com/C1000-197.html
IBM Certified Guardium
Data Protection v12.x
Administrator - Professional
Download IBM C1000-197 Exam Dumps for Best Preparation
2 / 5
1.Where should administrators first look when Guardium anomaly detection is not producing expected
results?
A. Baseline configuration settings on collectors
B. Appliance firmware version history
C. Report builder custom templates
D. LDAP server connection logs
Answer: A
2.What two tasks should administrators schedule to maintain long-term appliance performance? (Choose
two)
A. Periodic log rotation and cleanup
B. Manual shutdowns after each policy update
C. Continuous disabling of anomaly detection
D. Regular firmware and patch updates
Answer: AD
3.Which two steps must be taken to configure Guardium groups effectively for access and policy
management? (Choose two)
A. Assign members based on database roles or departments
B. Create groups only on aggregators for scalability
C. Define group-specific permissions and roles
D. Restrict groups to a single appliance only
Answer: AC
4.Which two elements must be configured when defining a Guardium policy for monitoring sensitive
queries? (Choose two)
A. Policy rules with specific conditions
B. Enforcement actions such as alert or block
C. Appliance firmware upgrade schedules
D. Database license type allocation
Answer: AB
5.Which factor is critical when planning integrations between Guardium and ticketing systems like
ServiceNow?
A. Ensuring that Guardium supports SNMP traps
B. Confirming API compatibility for automated incident creation
C. Assigning the ticketing system as a collector appliance
D. Using Guardium’s central manager to run ServiceNow scripts
Answer: B
6.What is the purpose of Guardium Installation Manager (GIM)?
A. Facilitating installation, updating and configuration of agents.
B. Capturing change audit information of configuration files and more on the database server.
C. Specifying the database platform and the instances that the S-TAP monitors on the S-TAP host.
Download IBM C1000-197 Exam Dumps for Best Preparation
3 / 5
D. Monitoring activity between the client and the database and forwards that information to the Guardium
collector.
Answer: A
7.What is a key function of the Audit Process Builder?
A. Creating manual logs of all database security events
B. Assigning custom firewall rules to audit-based policies
C. Automating workflows for auditing and compliance reporting
D. Encrypting policy results before sending to external systems
Answer: C
8.How can administrators identify and fix issues when Guardium backups fail repeatedly? (Choose two)
A. Check available storage space on the appliance
B. Review backup destination path and permissions
C. Disable all active policies until backups succeed
D. Reinstall the central manager appliance
Answer: AB
9.How can a datasource be created for use with Guardium Classifier application?
A. Using Guardium STAP
B. Using Database platform
C. Using Datasource Guardium API
D. Using Uploading a Word Doc file
Answer: C
10.What Guardium command or utility helps administrators review current system configuration details
during troubleshooting?
A. show system
B. guardium-check
C. config-list
D. syslog-analyze
Answer: A
11.When deploying Guardium appliances, what should be done before placing collectors into production?
A. Run a vulnerability assessment on the collectors
B. Apply latest patches and ensure time synchronization with NTP
C. Configure collectors as aggregators by default
D. Disable local logging to save space
Answer: B
12.What two outcomes can Guardium’s sensitive data classification provide to help an organization
strengthen compliance? (Choose two)
A. Identify columns containing regulated data such as PII
B. Automatically create central manager accounts
Download IBM C1000-197 Exam Dumps for Best Preparation
4 / 5
C. Produce classification reports for auditors
D. Change database table structures to encrypt columns
Answer: AC
13.What is applied first to upgrade a Guardium appliance?
A. GPU Patch
B. Health Check
C. Sniffer Update
D. Security Update
Answer: B
14.Who is typically responsible for reviewing the results of Guardium’s database discovery to determine
which servers require monitoring?
A. End users accessing the database
B. Operating system administrators
C. Appliance vendor representatives
D. Security or compliance officers
Answer: D
15.Which two report types can administrators create in Guardium to assist with investigations of
suspicious activity? (Choose two)
A. Policy violation reports
B. Appliance firmware update reports
C. Sensitive data discovery reports
D. S-TAP installation status reports
Answer: AC
16.A Guardium has two security policies installed.
What would prevent another policy, with limited logging, from being installed?
A. 'Selective Audit trail' was enabled in the policy
B. 'Install Last' must be selected when adding a new policy
C. 'Run Once Now' must be executed after policy installation
D. 'Run Once Now' must be executed before policy installation
Answer: A
17.What Guardium feature allows administrators to validate the deployment health of collectors and
aggregators across multiple regions?
A. Central manager policy builder
B. Deployment health check utility
C. Sensitive data discovery
D. Aggregator synchronization
Answer: B
18.Who should be consulted before deploying Guardium appliances into regulated environments such as
Download IBM C1000-197 Exam Dumps for Best Preparation
5 / 5
healthcare or finance?
A. Appliance vendor only
B. Security and compliance officers
C. End users of the monitored applications
D. Aggregator administrators
Answer: B
19.Which two planning considerations should be reviewed when designing a Guardium deployment for a
multinational organization with multiple data centers? (Choose two)
A. Network latency between collectors and aggregators
B. Regional data sovereignty and compliance requirements
C. Use of identical appliance passwords across all regions
D. Minimizing the number of collectors regardless of workload
Answer: AB
20.Which factor should be considered first when deciding what type of Guardium policy to create for a
new compliance regulation?
A. The regulatory control objectives
B. The database license allocation
C. The aggregator appliance capacity
D. The S-TAP agent patch level
Answer: A
21.What is the underlying technology in the architecture of Guardium Universal Connector?
A. Kafka nodes
B. Kafka cluster
C. Filebeat server
D. Logstash pipeline
Answer: D
22.Which two Guardium components are essential when planning for centralized management and policy
distribution in a large enterprise? (Choose two)
A. Central manager appliance
B. Collector appliance
C. Aggregator appliance
D. Standalone S-TAP agent
Answer: BD