C1000-197 by IBM Actual Free Exam Q&As

Question 1

What action should be configured in Guardium when administrators want immediate notification by email whenever a high-severity policy violation occurs?

A. Apply anomaly detection baseline recalibration B. Schedule a daily policy violation report C. Configure an alert with email notification action D. Create a syslog forwarding rule

Discussion 0

Correct Answer: C Vote an answer

Question 2

What is the main reason why Guardium deployments often include both collectors and aggregators in their architecture?

A. Collectors provide GUI access, while aggregators configure policies B. Collectors capture activity data, while aggregators consolidate it for enterprise-wide reporting C. Collectors manage agents, while aggregators store all network data D. Collectors handle alerting, while aggregators handle encryption

Discussion 0

Correct Answer: B Vote an answer

Question 3

Why should administrators generate a support package from Guardium appliances when escalating issues to IBM Support?

A. To automatically reset appliance configuration before IBM intervention B. To disable conflicting policies before troubleshooting C. To bypass the need for appliance backups D. To provide detailed logs and system diagnostics for faster resolution

Discussion 0

Correct Answer: D Vote an answer

Question 4

Which two tasks are performed during Guardium appliance integration with LDAP for access management? (Choose two)

A. Map LDAP groups to Guardium roles B. Test LDAP connection and user authentication C. Configure collector appliances as LDAP servers D. Assign all LDAP users full administrative access

Discussion 0

Correct Answer: A,B Vote an answer

Question 5

What two tasks should administrators schedule to maintain long-term appliance performance? (Choose two)

A. Regular firmware and patch updates B. Periodic log rotation and cleanup C. Manual shutdowns after each policy update D. Continuous disabling of anomaly detection

Discussion 0

Correct Answer: A,B Vote an answer

Question 6

How can administrators identify and fix issues when Guardium backups fail repeatedly? (Choose two)

A. Review backup destination path and permissions B. Reinstall the central manager appliance C. Check available storage space on the appliance D. Disable all active policies until backups succeed

Discussion 0

Correct Answer: A,C Vote an answer

Question 7

How can administrators maintain Guardium system health for long-term stability? (Choose two)

A. Schedule periodic data purge jobs B. Allow unlimited log retention for audit purposes C. Disable all logging to save disk space D. Apply patches and firmware updates regularly

Discussion 0

Correct Answer: A,D Vote an answer

Question 8

When should administrators perform appliance backups as part of Guardium maintenance?

A. Whenever system health alerts are triggered B. Before upgrades, patches, or major configuration changes C. After each database query is captured D. Only when the appliance is first deployed

Discussion 0

Correct Answer: B Vote an answer

Question 9

Which two Guardium features support ongoing policy maintenance across multiple appliances? (Choose two)

A. Database discovery scans B. Central manager policy distribution C. Policy versioning and history tracking D. Aggregator synchronization jobs

Discussion 0

Correct Answer: B,C Vote an answer

IBM Guardium Data Protection v12.x Administrator - Professional - C1000-197 Exam Practice Test