C2150-620 試験問題を無料オンラインアクセス

A System Administrator of a banking organization has become aware of some malicious traffic to its IBM Security Network Protection (XGS) appliance. The logs show patters of Denial of Service (DoS) attack and a lot of encrypted packets targeted to the M.1 port of the XGS appliance coming from an internal laptop IP address.
What should the System Administrator do next?

• A.Configure Management access policy to set the management port as TCP reset port.
• B.Configure Inbound SSL policy to inspect and drop such traffic.
• C.Configure Management access policy to restrict access.
• D.Configure Network access policy and Intrusion Prevention Policy to block DoS attacks.

The System Administrator of a company has purchased IP Reputation license for a new XGS appliance. After doing the initial setup of XGS, it is registered to SiteProtector (SP) and IP Reputation license is added in SP agent/module licenses. However, Local Management Interface (LMI) still shows no IP reputation license.
What should the System Administrator do to get the appliance to utilize the license?

• A.Add a Network Access Policy Rule using "Range Address" object for a range of IP Addresses.
• B.Add a network Access Policy rule using Geolocation object.
• C.Access XGS using CLI and restart "License and update" service.
• D.Access XGS using CLI and restart "Siteprotector communication" service.

A System Administrator wants to configure two XGS appliances in an active/active high availability (HA) setup so that network traffic can fail over to the secondary XGS without missing inspection of any packets. The diagram below shows the current cabling setup between the redundant firewalls and routers and the 4 built in ports on the XGS appliances:

What is wrong with the cabling diagram?

• A.One extra network cable is required between XGS A and XGS B. It can be plugged into either port 1.3 or 1.4 as long as it is the same port on both XGS appliances.
• B.Two extra network cables are required: one from XGS A port 1.3 to XGS B port 1.3 the other from XGS A port 1.4 to XGS B port 1.4.
• C.Four extra network cables are required: Cable 1) Firewall A to XGS B, port 1.3; Cable 2) Firewall B to XGS A, port 1.3; Cable 3) XGS A, port 1.4 to Router B; Cable 4) XGS B, port 1.4 to Router A.
• D.The incorrect ports are being used on XGS B. The firewall and router should be plugged into ports 1.3 and 1.4 respectively.

One XGS appliance in a financial company was running firmware version 5.2 for 2 years.
The System Administrator upgraded the firmware to 5.3.2.3 because version 5.2 is no longer supported and enabled Any-Any-Any-Inspect rule in Outbound SSL Inspection Policy according to new company audit policy. After that, several users complain that their workstations cannot get Windows Update any more.
What should the System Administrator do to resolve this issue?

• A.Create a domain certificate category application specifying *.update.microsoft.com in CN List and create an outbound SSL ignore rule with priority higher than Any-Any-Any-Inspect.
• B.Use the Microsoft domain certificate application object and create an outbound SSL ignore rule with priority higher than Any-Any-Any-Inspect.
• C.Enable Any-Any-Any- Privacy-sensitive Information-Ignore rule in Outbound SSL Inspection Policy and make sure the priority of this rule is higher than Any-Any-Any- Inspect.
• D.Enable the Any-Any-Microsoft domain certificate-Ignore built-in rule in Outbound SSL Inspection Policy and male sure the priority of this rule is higher than Any-Any-Any-Inspect

A System Administrator is preparing to manage an XGS appliance using the SiteProtector System.
Which three management actions can be performed? (Choose three.)

• A.Manage the Appliance SSL Certificate.
• B.Apply a snapshot.
• C.Create a Firmware backup.
• D.Configure Static Routes.
• E.Restart the appliance.
• F.Change the Flexible Performance Level.