C2150-561無料問題集「IBM Security Network Intrusion Prevention System V4.3 Implementation」

質問 1

What is the best Attack Prevention Method that identifies and stops malicious code based on behavior rather than matching a particular attack signature or pattern?

（A）TCP Reassembly

（B）Flow Assembly

（C）Content Analysis

（D）Shellcode Heuristics

正解：D 解答を投票する

質問 2

Virtual Local Area Network (VLAN) exclusions have been added to a Protection Domain, however events from those VLANs seem to be generated anyway. What is the most likely cause?

（A）Multiple VLANs cannot be excluded in a custom Protection Domain.

（B）The same exception has not been created on the Global Protection Domain.

（C）Incorrect interfaces have been specified in a custom Protection Domain.

（D）A VLAN cannot be excluded in a custom Protection Domain.

正解：C 解答を投票する

質問 3

While logged in as root into an IBM Security Network Intrusion Prevention System V4.3 appliance, which command allows real time viewing of log file activity?

（A）search -e

（B）grep 'error'

（C）tail -f

（D）vi

正解：C 解答を投票する

質問 4

Which Response Object would be configured in order for the appliance to send notifications to individuals or groups when events occur?

（A）e-mail

（B）Quarantine

（C）Log Evidence

（D）SMS

正解：A 解答を投票する

質問 5

Which two statements are true about the Rolling Packet Capture settings? (Choose two.)

（A）It defines how packets are captured.

（B）It defines the size of the packet capture file.

（C）It defines when packets are captured.

（D）It defines the packet capture format.

（E）It defines how the packets can be viewed.

正解：B、D 解答を投票する

質問 6

Where in the IBM Security SiteProtector System Console can a customer check the date a firmware update was run on an IBM Security Network Intrusion Prevention System appliance?

（A）in the agentinfo section under Module Status in the appliance Properties screen

（B）on the Health Summary System tab in the appliance Properties screen

（C）on the Agent Messages tab in the appliance Properties screen

（D）in the patchinfo section under Module Status in the appliance Properties screen

正解：A 解答を投票する

質問 7

What are the correct steps to backing up the firmware configuration on an IBM Security Network Intrusion Prevention System V4.3 appliance?

（A）connect to the appliance using a serial cable, log in as admin, and from the Configuration menu select Appliance Management and then select Backup Current Configuration

（B）connect remotely to the appliance using a Web browser to the Local Management Console (LMI), log in as admin, navigate to the configuration link on the left menu, select Backup Configuration, and select a location to save the backup file

（C）connect to the appliance remotely using SSH terminal, log in as root from the command line, and use the command backup configuration

（D）connect a USB CD-ROM and locally connect to the appliance via a terminal emulation program, reboot the appliance, and use the backup utility from the PXE boot server

正解：A 解答を投票する

質問 8

Instead of downloading updates directly from the Internet, an administrator wants to have the IBM Security Network Intrusion Prevention System V4.3 appliance download updates through their local X-Press Update Server. Which TCP port for outbound traffic from the appliance to the X-Press Update Server would the administrator have to make accommodations for on any firewall?

（A）port 2998

（B）port 443

（C）port 3994

（D）port 3995

正解：C 解答を投票する

質問 9

An administrator receives an e-mail alert and it appears that one of the servers is under attack. The administrator logs into the Local Management Interface and identifies the attack in the Top 10 attacks list. How is immediate action taken to block the attacker?

（A）select Network Health Dashboard, click on the server's IP address, and set the Block Duration for the attacking IP address

（B）select the name of the event in the Top 10 attack list, identify the target server, click on the IP address for the source (attacker), and select Block Intruder and Block Duration

（C）select the name of the event in the pop-up, click Block, select the server from the list, and click Apply

（D）right-click on the name of the event, select the server's IP address, and click Block

正解：B 解答を投票する

質問 10

How do High Availability partners share network traffic when configured in Standard High Availability mode?

（A）over the mirrored port

（B）over the management port

（C）over the serial console port

（D）over the TCP reset port

正解：A 解答を投票する

C2150-561 無料問題集「IBM Security Network Intrusion Prevention System V4.3 Implementation」

弊社を連絡する

関連リンク

トップ試験