IBM InfoSphere Guardium Technical Mastery Test v2 Sample Questions:

1. What is a security policy?

A) A series of transactions where the data server communicates with the collector and sharesits current security status.
B) A specially-formatted document from a government or third-party institution that can beimported into Guardium for easy audit configuration.
C) An XML file that must be manually created and configured so the S-TAP can understandthenature of the traffic that it reports on.
D) A Guardium object containing an ordered set of rules that are applied to the observedtraffic between clients and data servers.

2. Which of the following Big Data environments are supported by Guardium?

A) Hadoop, CouchDB, PostgreSQL, Cloudera
B) Cloudera, BigInsights, Cassandra, MongoDB
C) Cloudera, MongoDB. Netezza, VSAM
D) MongoDB, Cassandra, Exadata, BigInsights

3. What are the four types of tests that can be used in a Guardium vulnerability assessment?

A) Predefined, subscription-based, observed behavioral and configuration vulnerability.
B) OS-level, kernel, special and external.
C) User defined, observed behavioral, database configuration and server configuration.
D) OS-level, native, special and external.

4. Which of the following is a valid use case for scheduled database auto-discovery?

A) Automating the cataloging of new database instances so the administrator does not have to perform this task manually.
B) Database auto-discovery cannot be scheduled because the user must specify a series of IP addresses and port ranges every time prior to running the process.
C) Ensuring that S-TAP instances have the latest database configuration for all the databases that are being monitored.
D) Identifying new or rogue databases across environments, as well as new instances that may have been created within existing, already discovered database services.

5. How would a DBA or developer notify Guardium using the Application User API that anapplication user has taken or given up control of a data server connection?

A) By creating a wrapper solution that sends HTTP requests to Guardium's service-oriented API whenever an event like this happens.
B) By registering the application's connection pool with Guardium.
C) By importing the GuardUtils library and issuing calls through it from the application.
D) By using the GuardAppUser call in the form of a SQL SELECT statement to indicate that a new application user has taken control of the connection.

Solutions: