We're so confident of our products that we provide no hassle product exchange.
IBM C2090-463 Exam Overview:
| Certification Vendor: | IBM |
|---|---|
| Exam Name: | IBM InfoSphere Guardium |
| Exam Number: | C2150-463 |
| Exam Duration: | 90 minutes |
| Available Languages: | English |
| Exam Format: | Multiple select, Multiple choice |
| Certificate Validity Period: | 3 years |
| Real Exam Qty: | 67 - 130 |
| Passing Score: | 65% or 800 scaled score |
| Exam Price: | $200 USD |
| Recommended Training: | IBM Knowledge Center - Guardium Documentation IBM Security Guardium Administration Training |
| Exam Registration: | Pearson VUE Registration IBM Certification Portal |
| Sample Questions: | IBM C2090-463 Sample Questions |
| Exam Way: | Onsite at Pearson VUE test centers; Online proctored exam not available |
| Pre Condition: | Basic knowledge of database security, SQL, and network concepts; recommended 6-12 months hands-on experience with Guardium |
| Official Syllabus URL: | https://www.ibm.com/training/certification |
IBM C2090-463 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Monitoring and Reporting | 15% | - Log management and retention - Activity monitoring - Custom queries and dashboards - Compliance reporting |
| Architecture and Components | 25% | - S-TAP, G-TAP, A-TAP agents - Collectors, Central Managers, Aggregators - Deployment models - Guardium system architecture |
| Installation and Configuration | 25% | - Appliance setup and initial configuration - High availability and clustering - Agent installation and tuning - Network and port configuration |
| Maintenance and Troubleshooting | 10% | - Performance tuning - Backup and recovery - System updates and patches - Diagnostics and issue resolution |
| Policy Management | 25% | - Policy creation and rules - Sensitive data classification - Policy distribution and updates - Alerting and blocking actions |
IBM InfoSphere Guardium Sample Questions:
Question 1
Which statement about Configuration Audit System (CAS) is true?
A. It supports vulnerability assessment tests using observed behavior.
B. It does not support windows platform.
C. It supports running operating system shell scripts.
D. It does not support monitoring of file permissions (rwxrwxrwx).
Question 2
What do extrusion rules inspect?
A. Result sets sent by the database server to the client.
B. SQL commands issued by a user.
C. SQL Errors and Failed Logins.
D. Changes to the database server at the OS.
Question 3
Which statement is true regarding users created in a centrally managed environment?
A. Users can only be created on Central Manager and will be stored on Central Manager only.
B. Users can only be created on Central Manager but will be propagated to all managed units.
C. Every managed unit has its own set of users defined.
D. Users can be created on any appliance and will be available on all the appliances at once.
Question 4
Given the security policy guard_tap.ini configuration shown below:
What must be done in order for an S-Gate Terminate action to work properly with a two rule policy?
A. You must have a rule with an action of "S-Gate Attach" with "continue" flag checked above the "S-Gate Terminate" rule in the policy.
B. You must have a rule with an action of "S-Gate Attach" with "continue" flag checked below the "S-Gate Terminate" rule in the policy.
C. You must have a rule with an action of "S-Gate Attach" above the "S-Gate Terminate" rule in the policy.
D. Youmust have a rule with an action of "S-Gate Attach" below the "S-Gate Terminate" rule in the policy.
Question 5
Which storage type requires upload of thePEA file?
A. CENTERA
B. SFTP
C. SCP
D. TSM
Solutions:
| Question 1 Answer: C | Question 2 Answer: A | Question 3 Answer: B | Question 4 Answer: A | Question 5 Answer: A |
By Liz
