Free IBM P2090-739 Exam Dumps Questions & Answers

Which of the following is often required to ensure that Guardium can identify a user's credentials through the Stored Procedure Monitoring feature?

• A.A well-configured custom identification procedure mapping.
• B.A credential replication routine available for free from Guardium.
• C.Reconfiguring the security policy so the appliance knows all the application servers that contact the data server.
• D.A database system-specific plug-in that attaches on to the collector's engine.

Which of the following best describes the role of the aggregator in a Guardium environment?

• A.The aggregator is another name for the Central Policy Manager.
• B.The aggregator is a Guardium appliance that collects and consolidates information from multiple collectors to a single Aggregation Server, allowing for reporting across the enterprise.
• C.The aggregator is a Guardium appliance that allows a collector and a Central Policy Manager to communicate and is required in multi-collector environments.
• D.The aggregator is the Guardium appliance that communicates with mainframes.

Which of the following components collects and parses the live database traffic used to trigger areal-time alert when a security policy rule is broken?

• A.The Change Audit System
• B.The Real Time Communications Framework
• C.The Inspection Engine
• D.The Live Report Builder

A developer has recently created a temporary database to test her new human resourcesmanagement application. To test it in a production-like environment she copies the MANAGERStable from the production server into her test database. This table includes sensitive personalinformation. Which of the following will help the database auditor identify this new database?

• A.The database auditor can be notified by e-mail using Guardium's scheduled database auto-discovery feature.
• B.The developer must create the new database using Guardium's Application Events API, which would show up on the Guardium interface as a change report.
• C.The database auditor can be notified of new sensitive data by a previously scheduled sensitive object discovery job.
• D.The auditor cannot incorporate the new environment into Guardium unless she is given the exact details of the database and host system.

Which of the following steps must be taken before a custom table can be defined on theGuardiumappliance?

• A.Data in the existing database must be verified to make sure that the different data types are supported by Guardium's custom tables.
• B.The Guardium API must be used to notify the engine that a custom table is going to be defined.
• C.All other users of the Guardium user interface must be logged off since there can only be one active session when the custom table is being defined.
• D.A test provided by Guardium must be run on the data server to make sure no malicious data is found in the table to be queried.