C2150-561 Exam Training Practice Tests (IBM Security Network Intrusion Prevention System V4.3 Implementation)]

Question 1

Which administration tool is used when unregistering an IBM Security Network Intrusion Prevention System appliance managed by IBM Security SiteProtector System (SiteProtector)?

A. IPS Setup Wizard B. LCD Panel C. Local Management Interface (LMI) D. SiteProtector Console

Correct Answer: C

Question 2

Using IBM Security Network Intrusion Prevention System V4.3, what occurs after clicking Install Now when updating the firmware?

A. A System Backup window will open with a Skip option. B. The firmware update runs, a system backup is created, and the appliance may reboot. C. The firmware update runs and may reboot the appliance. D. The firmware update runs, the appliance reboots, and the browser reconnects when it completes.

Correct Answer: C

Question 3

An administrator has enabled IBM Security SiteProtector System (SiteProtector) Management on the IBM Security Network Intrusion Prevention System V4.3 (Network IPS) appliance, but they are unable to locate the appliance in the Agent view of the SiteProtector Console. Which two actions will make the appliance appear in the Console? (Choose two.)

A. check the appropriate site range under Ungrouped Assets B. unregister the appliance and reregister it using Local Settings Override C. check inside the default Network IPS or G-Series groups D. run the Add Agent Wizard in the Console E. check inside the Locally Configured Agents group

Correct Answer: A,C

Question 4

How does single-click blocking work?

A. It enables the Block Response for the reported event. The appliance blocks all traffic to and from the IP address until the Block Response is disabled. B. It adds a rule to the Quarantine Rules page to block the source IP address reported in the event. The appliance blocks all traffic to and from that IP address for the time specified in the rule. C. It enables the Quarantine Response for the reported event. The appliance blocks all traffic to and from that IP address until the Quarantine Response is disabled. D. It adds a rule to the Firewall Rules page to block the source IP address reported in the event. The appliance blocks all traffic to and from that IP address until the firewall rule is disabled.

Correct Answer: B

Question 5

While logged in as root into an IBM Security Network Intrusion Prevention System V4.3 appliance, which command allows real time viewing of log file activity?

A. tail -f B. search -e C. grep 'error' D. vi

Correct Answer: A

Question 6

A company is having network issues and the administrator suspects it is related to the interface settings. Where in the IBM Security Network Intrusion Prevention System V4.3 Local Management Interface would interface setting issues be updated?

A. under Manage Systems Settings, select Security Interfaces, select Port Speed/Duplex settings B. under Network Settings tab, select TCP/IP settings C. under Home Appliance Dashboard, click on the Network Health Dashboard link, select the segment with the issue, right-click on the interface, and select the port settings D. under Home Appliance Dashboard, locate the interface with issues and right-click on it to select Port Settings

Correct Answer: A

Question 7

An administrator has two user defined events with identical names. One is assigned to a global protection domain and the other is assigned to a custom protection domain. Which protection domain reports the generated event?

A. The event would be generated from the custom protection domain because it overrides the global protection domain policy. B. The event would not fire because the appliance would not know how to parse conflicting protection domain policy user-defined events. C. The event would generate two separate events, one from the global protection domain and the other from the custom protection domain. D. The event would be generated from the global protection domain because it overrides the custom protection domain policy.

Correct Answer: A

Question 8

What is the maximum network throughput that IBM Security Network Intrusion Prevention System V4.2 can support?

A. 4G B. 10G C. 8G D. 23G

Correct Answer: D

Question 9

Virtual Local Area Network (VLAN) exclusions have been added to a Protection Domain, however events from those VLANs seem to be generated anyway. What is the most likely cause?

A. A VLAN cannot be excluded in a custom Protection Domain. B. Multiple VLANs cannot be excluded in a custom Protection Domain. C. Incorrect interfaces have been specified in a custom Protection Domain. D. The same exception has not been created on the Global Protection Domain.

Correct Answer: C

Question 10

Where would a user be added to allow a remote user to access the IBM Security Network Intrusion Prevention System V4.3 Local Management Interface?

A. the User Management utility in SiteProtector B. the Accounts and Passwords page in the Web interface C. the Password Management menu in the SSH Configuration menu D. the Remote Access policy in IBM Security SiteProtector System (SiteProtector)

Correct Answer: B

IBM Security Network Intrusion Prevention System V4.3 Implementation - C2150-561 Exam Practice Test