Which two statements are true about the Rolling Packet Capture settings? (Choose two.)
A. It defines how the packets can be viewed.
B. It defines the size of the packet capture file.
C. It defines when packets are captured.
D. It defines the packet capture format.
E. It defines how packets are captured.
正解:B,D
質問 2:
John is currently responsible for maintaining a group of IBM Security Network Intrusion Prevention System appliances at his business location. His manager would like to allow all members of their network security team to access the appliances in case John is out of the office, but there is concern about possible security issues. So the manager would like to limit administrative access to the users and also wants those users not to share a common password. After further thought, John's manager would also prefer that only a few of the team members have console access while limiting the rest to Web interface access only. What must John do next?
A. Nothing, the requested configuration is not possible.
B. Change the Remote Authentication Server Usage configuration for the Web interface only users.
C. Modify the user accounts in the Accounts and Password policy.
D. Add additional root access user accounts in the SSH Configuration menu.
正解:A
質問 3:
What is required when connecting an IBM Security Network Intrusion Prevention System appliance in Monitoring mode?
A. connect the appliance to a tap, hub, or span port
B. connect the appliance using the management port
C. connect the appliance using the console port
D. connect the appliance inline
正解:A
質問 4:
Where in IBM Security SiteProtector System (SiteProtector) would it be determined why an IBM Security Network Intrusion Prevention System V4.3 (Network IPS) appliance is Active with Errors?
A. under System Summary, select Agent Messages in SiteProtector Agent Properties
B. under Agent Status, select Agent Messages in Agent Manager Properties
C. under Health Summary, select Agent Messages in Network IPS Properties
D. under Network Summary, select Agent Messages in Network IPS Properties
正解:C
質問 5:
Where would a user be added to allow a remote user to access the IBM Security Network Intrusion Prevention System V4.3 Local Management Interface?
A. the Remote Access policy in IBM Security SiteProtector System (SiteProtector)
B. the Accounts and Passwords page in the Web interface
C. the User Management utility in SiteProtector
D. the Password Management menu in the SSH Configuration menu
正解:B
質問 6:
What is the purpose of the Firewall Rules policy?
A. To define how and when packets are captured and stored for general network analysis.
B. To configure rules to drop or block traffic based on various source and target information in the packet.
C. To create security events based on connection information.
D. To review rules generated in response to detected intruder events and to manually add new ones.
正解:B
質問 7:
What event would trigger sending a policy update to an IBM Security Network Intrusion Prevention System V4.3?
A. The Agent Manager receives an encrypted heartbeat from the appliance.
B. A Refresh Agent is performed on the sensor in the IBM Security SiteProtector System Console.
C. The Application Server accesses a PHP script on the appliance.
D. The sensor contacts the Agent Manager on port 3994.
正解:A
石*瞳 -
このC2150-561参考書をまずは通して一周読み解いて、本番試験に受験してスムーズに書けて、無事に受かりました。