IBM Security Network Intrusion Prevention System V4.3 Implementation - 000-561 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Where is the IBM Security Network Intrusion Prevention System V4.3 (Network IPS) Management Interface IPv6 address and gateway set in IBM Security SiteProtector System?

A. open the Security Interfaces Policy under Agent-Specific Policies for the Network IPS B. right-click on the Network IPS agent in the Agent view and select Management Settings C. in the properties for the Network IPS agent under the Management Interface D. open the Management and TCP Reset Interfaces policy under Agent-Specific Policies for the Network IPS

Discussion 0

Correct Answer: D Vote an answer

Question 2

The IBM Security Network Intrusion Prevention System V4.3 is not registering with IBM Security SiteProtector System (SiteProtector). Where in the Local Management Interface (LMI) can potential connection issues be corrected?

A. Select Telnet under System Tools and telnet to the Agent Manager IP using port 3995. B. If the SiteProtector Management option was selected during the initial installation, SiteProtector communications settings cannot be changed in the LMI. C. On the SiteProtector Management page, confirm Register with SiteProtector has been selected and review the Agent Manager Configuration settings. D. Under Management and TCP Reset Interfaces, check to see that both ports 443 and 3995 are enabled.

Discussion 0

Correct Answer: C Vote an answer

Question 3

A network engineer was notified of some network latency and occasional traffic disruption on a network segment that is monitored by a GX5108 IBM Security Network Intrusion Prevention System V4.3 (Network IPS) appliance. Upon reviewing the logs, one entry stood out: What kind of problem is this and what would be the first course of action the network engineer should take?

A. This is an IBM Protocol Analysis Module (PAM) Internal Error and should be considered a high severity problem since PAM has become unstable. The first course of action would be to contact IBM Technical Support, open a PMR, and attach the error report. B. This is a PAM Internal Error and should be considered a high severity problem since PAM has become unstable. The first course of action would be to reregister the Network IPS appliance after tuning the security events policy so that it does not overload the Network IPS appliance with excessive signature parsing. C. This is a low severity system event and should only be taken seriously if it occurs in excess of three times in a 24 hour period. If this occurs, then contact IBM Security Solutions Technical support for further analysis. D. This is a PAM Internal Error and should be considered a low severity problem since PAM might have had some issues processing traffic. The first course of action would be to reboot the appliance and wait to see if the error reoccurs.

Discussion 0

Correct Answer: A Vote an answer

Question 4

Which area of the IBM Protocol Analysis Module technology prevents Skype from using enterprise network bandwidth?

A. Client-side Application Protection B. Data Security C. Threat Detection and Prevention D. Application Control

Discussion 0

Correct Answer: D Vote an answer

Question 5

An administrator has enabled IBM Security SiteProtector System (SiteProtector) Management on the IBM Security Network Intrusion Prevention System V4.3 (Network IPS) appliance, but they are unable to locate the appliance in the Agent view of the SiteProtector Console. Which two actions will make the appliance appear in the Console? (Choose two.)

A. run the Add Agent Wizard in the Console B. check inside the Locally Configured Agents group C. check the appropriate site range under Ungrouped Assets D. unregister the appliance and reregister it using Local Settings Override E. check inside the default Network IPS or G-Series groups

Discussion 0

Correct Answer: C,E Vote an answer

Question 6

The SOC has reported that a GX5108 IBM Security Network Intrusion Prevention System V4.3 (Network IPS) has gone offline. As part of initial troubleshooting steps, which test verifies if the Network IPS appliance can communicate to the Agent Manager?

A. Open a command prompt and perform a ping test over port 3995 using the IP address of the Agent Manager B. Open a command prompt and perform a telnet test over port 2998 using the IP address of the Agent Manager C. Open a command prompt and perform a ping test over port 2998 using the IP address of the Agent Manager D. Open a command prompt and perform a telnet test over port 3995 using the IP address of the Agent Manager

Discussion 0

Correct Answer: D Vote an answer

Question 7

What is the default password after using the LCD panel to configure an IBM Security Network Intrusion Prevention System V4.3 appliance for the first time?

A. randomly system generated B. password is blank C. issadmin D. admin

Discussion 0

Correct Answer: A Vote an answer

Question 8

Where in the Local Management Interface is the location of the date and time of the last backup of an IBM Security Network Intrusion Prevention System V4.3 viewable?

A. System Dashboard B. Evidence log C. Message log D. Security Dashboard

Discussion 0

Correct Answer: A Vote an answer

Question 9

What is the most efficient process to restore an appliance configuration back to factory default?

A. use the built-in recovery boot manager B. perform a factory restore using a laptop as a PXE boot server C. perform a factory restore using a USB flash drive D. from Appliance Management in the Configuration menu, recover the configuration from a backup while logged in locally as root

Discussion 0

Correct Answer: A Vote an answer

Question 10

SNMP notifications are used for which two purposes? (Choose two.)

A. security event B. available hot fix C. high availability fail-over state change D. license compliance E. password expiration

Discussion 0

Correct Answer: A,D Vote an answer