IBM InfoSphere Guardium 認定 C2090-463 試験問題:

1. Which one is NOT a Guardium vulnerability assessment test type?

A) Query-based tests
B) CAS-based tests
C) Common Vunerability Exposure (CVE) tests
D) Fine grain audit tests

2. For an SQL Server 2005 environment using encryption, what can cause DB User and Source Program information to show up blank in the Guardium reports?

A) The Instance Name parameter in the inspection engines is not correct.
B) The port range specified in the inspection engines is not correct.
C) A-TAP is not installed.
D) There is a policy with Ignore S-TAP Session rule blocking the users.

3. Which operating system requires that the oracle executable be instrumented prior to activating A-TAP?

A) Solaris
B) AIX
C) HP-UX
D) Linux

4. What does this GRDAPI command do? grdapi create_member_to_group_by_desc desc="PCI Admin Users" member="Joe"

A) Creates a new group called "PCI Admin Users.
B) Creates a new member, Joe, and adds it to the group "PCI Admin Users".
C) Creates a new member, PCI Admin User, and adds it tothe group "Joe".
D) Creates a new description, "PCI Admin User", and adds it to the member "Joe".

5. What is a disadvantage of using S-TAP terminate action in the policy (and related functionality) over S-GATE terminate?

A) The decision to terminate is done by S-TAP and as a result it has significant negative impact ondatabase server performance.
B) The violation activity will start bringing results from the database before the connection is terminated and as a result data leakage is possible.
C) Additionally licensed feature needs to be installed and as a result there is additional cost associated with this functionality.
D) There is a need to install the S-TAP agent on the database server and as a result it's harder to deploy.

質問と回答：