IBM C2150-200 Exam Overview:
| Certification Vendor: | IBM |
|---|---|
| Exam Name: | IBM Security Systems SiteProtector V3.0 - Implementation |
| Exam Number: | C2150-200 |
| Exam Price: | Varies (~$30-$250 depending on region and provider) |
| Exam Duration: | 90-120 |
| Available Languages: | English |
| Related Certifications: | IBM Security SiteProtector System certifications IBM Certified Deployment Professional (Security track) |
| Real Exam Qty: | 59-67 |
| Exam Format: | Proctored exam, Multiple Choice Questions (MCQ), Computer-based exam |
| Certificate Validity Period: | Typically 2-3 years (IBM certification policy dependent) |
| Passing Score: | 65%-70% |
| Recommended Training: | IBM Redbooks - SiteProtector System Implementation Guides IBM Security SiteProtector System: Basic Implementation and Administration (IS604G) |
| Exam Registration: | IBM Training & Certification Portal Pearson VUE IBM Exams |
| Sample Questions: | IBM C2150-200 Sample Questions |
| Exam Way: | Pearson VUE proctored computer-based exam (online or test center depending on region) |
| Pre Condition: | Recommended experience with TCP/IP networking and Windows Server environments; prior knowledge of IBM Security SiteProtector or similar SIEM/IDS systems is helpful. |
| Official Syllabus URL: | https://www.ibm.com/training/ |
IBM C2150-200 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Topic 1: Threat Monitoring and Incident Response | - Event monitoring
|
| Topic 2: Maintenance, Updates, and Troubleshooting | - Troubleshooting
|
| Topic 3: Policy and Security Management | - Policy creation and deployment
|
| Topic 4: SiteProtector System Architecture and Deployment | - Core architecture components
|
IBM Security Systems SiteProtector V3.0 - Implementation Sample Questions:
Which two integrations are available between SiteProtector 3.0 and QRadar products? (Choose two.)
- A. SiteProtector 3.0 can send IPFix flow information to toQRadar SEIM.
- B. SiteProtector 3.0 can import scheduled IPS reports from QRadar SEIM for viewing within the SiteProtector 3.0 Reports Tab.
- C. SiteProtector 3.0 can send Events to QRadar SEIM.
- D. QRadar Vulnerability Manager can send vulnerability scan information to SiteProtector 3.0 for Fusion Correlation.
- E. QRadar SEIM can send firewall events to SiteProtector 3.0 for Fusion Correlation.
Correct Answer: A,D 🗳️
Which two IBM SiteProtector 3.0 Console views support use of custom actions? (Choose two.)
- A. Policy view
- B. Agent view
- C. Analysis view
- D. System view
- E. Ticketing view
Correct Answer: A,D 🗳️
Explanation: Only visible for SurePassExams members. You can sign-up / login (it's free).
What is the likely cause when the Application Server service fails to start?
- A. The cache of the Application Server is full.
- B. The Create Tables function failed.
- C. The Application Server password is incorrect.
- D. In the IIS manager, the office server web services is running on the wrong SSL port (433).
Correct Answer: A 🗳️
Which compatibility mode does SiteProtector have to work at to support SP800-131A standard?
- A. FIPS
- B. Strict
- C. SHA-2
- D. Compatible
Correct Answer: B 🗳️
Explanation: Only visible for SurePassExams members. You can sign-up / login (it's free).
Which function does Security Fusion Module have?
- A. It provides for event collector stacking.
- B. It merges similar security events.
- C. It compares attack information with vulnerability information.
- D. It is used for high availability SiteProtector requirements.
Correct Answer: C 🗳️
Explanation: Only visible for SurePassExams members. You can sign-up / login (it's free).
We're so confident of our products that we provide no hassle product exchange.


By Henry

