C2150-200 Online Practice Questions and Answers

Which two integrations are available between SiteProtector 3.0 and QRadar products? (Choose two.)

A. SiteProtector 3.0 can send Events to QRadar SEIM.

B. SiteProtector 3.0 can send IPFix flow information to toQRadar SEIM.

C. QRadar SEIM can send firewall events to SiteProtector 3.0 for Fusion Correlation.

D. QRadar Vulnerability Manager can send vulnerability scan information to SiteProtector 3.0 for Fusion Correlation.

E. SiteProtector 3.0 can import scheduled IPS reports from QRadar SEIM for viewing within the SiteProtector 3.0 Reports Tab.

Which step is required to reindex the RealSecureDB database?

A. Disable database backup policy

B. Stop the SQL Server Browser Service

C. Verify that issDaemon service is running on all servers

D. Stop the SiteProtector Application, Sensor Controller, and Web Server services

Which tool is recommended for a customer, who wants to retain old event data from the system?

A. Event Archiver

B. Event Backup Tool

C. Security Event Archive Tool

D. SiteProtector Storage Server

Which compatibility mode does SiteProtector have to work at to support SP800-131A standard?

A. FIPS

B. Strict

C. SHA-2

D. Compatible

Which two Windows groups can be added to the IBM SiteProtector System User Group? (Choose two.)

A. Local Groups

B. System Groups

C. Domain Groups

D. Custom Groups

E. Network Groups

The system appears in a domain and the DNS, but it does not appear in the Active Directory tree. As a result, the SiteProtector system cannot resolve a name for your computer.

What is the likely cause of this issue?

A. The dnsconfig.xml is improperly configured.

B. The trust relationship between this workstation and SiteProtector has failed.

C. TheSiteProtector DNS local hosts file needs to include the system information.

D. The computer may not have an assigned DNS Server name in the Active Directory object.

Which two modifications can the Impact Analysis component make to a security event that failed in IBM SiteProtector 3.0 Security Fusion Module? (Choose two.)

A. Block the event

B. Change the priority of the event to Low

C. Change the priority of the event to High

D. Increase the severity of the event to one level

E. Decrease the severity of the event to one level

What is the name format for creating a new agent group policy repository?

A. Repository

B. Repository

C. Repository

D. Policy Repository

How are Windows security updates delivered to the appliance for the SiteProtector appliance install?

A. As a fix pack

B. As a Firmware update

C. As a database service pack

D. Microsoft security updates are handled via the Windows OS

Where is the option to increase the default number of rows to display in the Analysis view?

A. Tools > Options > Asset

B. Tools > Options > Analysis

C. Tools > Options > General > Tables

D. Tools > Ticketing Setup > Notification tab