학습 환경은 사람마다 다릅니다. Fast2test은 IBM Security Network Protection (XGS) V5.3.2 System Administration 대비 60문항을 인쇄 가능한 PDF, 실제 시험 환경을 재현한 데스크톱 테스트 엔진, 브라우저에서 바로 이용하는 온라인 테스트 엔진의 세 가지 형태로 제공하여, C2150-620 수험생이 원하는 방식으로 학습하실 수 있도록 지원합니다.

IBM C2150-620 시험 개요:

IBM C2150-620 시험 요강 주제:

C2150-620 수험생을 위한 핵심 질문과 답변

최신 IBM Certified System Administrator C2150-620 무료샘플문제

문제 #1

A System Administrator sees a lot of Ping_Sweep events reported as blocked on the network. However, because the Ping_Sweep signature only blocks the ping packet that triggers the event, most of the ping packets are allowed through the XGS.
How can these suspicious packets be effectively blocked from the network?

A. Add a catch-all rule to the bottom of the NAP that rejects all traffic.
B. Add a Network Access policy rule to reject ICMP traffic.
C. Add a quarantine response to the Ping_Sweep event.
D. Enable the Ping_Sweep event in the default IPS policy with the Block option.

문제 #2

A System Administrator has become aware of a new zero-day vulnerability. There is no current protection on the XGS for this new attack.
How should a customer obtain temporary protection against the new attack?

A. Contact customer support for assistance in creating a signature to block the traffic
B. Contact X-Force via developerWorks and request a temporary signature
C. Use IP reputation blocking against Malware and Bot sources
D. Research the vulnerability on X-Force Exchange, check for collections, and utilize Open Signature rules if provided.

문제 #3

A System Administrator begins receiving widespread reports of traffic latency and disruption from users and wants to determine which device in a network is causing the problem.
Which step can the System Administrator take to rule out the XGS?

A. Use the dpi off command to disable inspection.
B. Clear all active quarantine rules.
C. Ping sample hosts from the command line and note the time.
D. Restart the packet processing daemon.

문제 #4

When registering an XGS appliance to the Site Protector, a System Administrator decided to use a strict cryptography level.
Which protocol is allowed in this configuration?

A. SP 800-131A
B. TKS v1.1
C. SSLv3
D. TLS v2.1

문제 #5

A System Administrator wants to integrate the XGS product with an existing SIEM deployment.
Which configuration changes should be made to ensure that the SIEM product receives information about security attack incidents?

A. Enable QRadar format/LEEF format for the Event Log object.
B. Add a remote syslog object with the IP address of the SIEM console to all IPS objects in use.
C. Add a quarantine response object with the IP Address of the SIEM console to the Advance Threat Protection Agent list.
D. Enable Remote IPFix Flow Data Export for an IPS object.

질문과 대답: