The policy has an extrusion rule with action of 'Log Extrusion Counter' when a credit card number is returned by the query. The inspection engine is configured with:

Query 'select credit_card from TABLE1 where customer_id in (1,2,3);' returns a total of 120 records with 10 creditcards returned in each network packet. What is expected result for SUM(Returned Data Count) from Full SQL domain for this query?
A. 0
B. 74
C. 120
D. 12
正解:C
質問 2:
When Configuration Audit System (CAS) is deployed to a server, which statement is true?
A. Wildcard support such as "/home/oracle/../.*ora" is not supported to identify all files *.ora within the /home/oracle subdirectories.
B. The CAS template is changed to a specific instance where all variables are instantiated to specific items to be monitored on the host.
C. S-TAP must be installed with CAS.
D. Using an * means do not match any characters in the templatedefinition.
正解:B
質問 3:
After a role is removed, if the user attempts to access reports or applications that are no longer authorized to this user, what will happen?
A. A "not authorized" message will be produced.
B. Nothing, once you are given access removing roles will not affect your access to that application or report.
C. The user account will be temporarily locked.
D. The user session will be terminated.
正解:A
質問 4:
Which step is necessary to configure Vulnerability assessment for CVE tests?
A. Install and configure CAS
B. Create datasource
C. Install and configure S-TAP
D. Create policy
正解:B
質問 5:
Which component of the Guardium solution will terminate thedatabase connection as part of Data access level control / blocking functionality?
A. S-GATE functionality within CAS agent running on the database server.
B. S-GATE functionality within S-TAP process running on database server.
C. S-GATE functionality within sniffer process running of Guardium collector.
D. S-GATE functionality within S-GATE agent running on database server.
正解:B
質問 6:
What is the documented procedure for handling delayed cluster disk mounting?
A. Configure the wait_for_db_exec parameter in the guard_tap.ini with an appropriate delay.
B. Manually restart the S-TAP process after mounting the database server directory.
C. Ensure that the S-TAP process is started only after the database installation directory is available.
D. There is no special procedure, S-TAP can automatically detect when the database directory becomes available.
正解:A
質問 7:
Which statement will create an inspection engine for an Oracle database on host 10.10.9.57?
A. grdapi create_stap_inspection_engine stapHost=10.10.9.57 protocol=DB2 portMin=50001 portMax=50001 dbInstallDir=/home/db2inst2 procName=/home/db2inst2/sqllib/adm/db2sysc client=0.0.0.0/0.0.0.0 db2SharedMemAdjustment=20 db2SharedMemClientPosition=61440 db2SharedMemSize=131072 ktapDbPort=50001
B. grdapi create_stap_inspection_engine stapHost=10.10.9.59 protocol=Oracle portMin=1521 portMax=1521 dbInstallDir=/usr/lib/oracle procName=/usr/lib/oracle/app/oracle/product/10.2.0/server/bin/oracle client=0.0.0.0/0.0.0.0 ktapDbPort=1521
C. grdapi create_stap_inspection_engine stapHost=10.10.9.57 protocol=Sybase portMin=4200 portMax=4200 client=0.0.0.0/0.0.0.0 ktapDbPort=4200
D. grdapi create_stap_inspection_engine stapHost=10.10.9.57 protocol=Oracle portMin=1521 portMax=1521 dbInstallDir=/usr/lib/oracle procName=/usr/lib/oracle/app/oracle/product/10.2.0/server/bin/oracle client=0.0.0.0/0.0.0.0 ktapDbPort=1521
正解:D