P2090-739 試験問題を無料オンラインアクセス

Which termination mechanism is most suitable for monitoring privileged users where preventingdata leaks is much more important than latency?

• A.S-TAP Terminate.
• B.S-GATE Terminate.
• C.Both S-TAP and S-GATE Terminate.
• D.RESET.

A database known to contain the medical records of a foreign head of state is accessed at 1:30 AM.
No security mechanism is installed and so this highly sensitive information is leaked to the media.
Could this breach have been detected by running a Guardium vulnerability assessment without creating any custom assessment tests?

• A.No, this type of test is not included with Guardium.
• B.Yes,after hours login detection is one of the standard behavioral vulnerability tests included with Guardium.
• C.Yes, but only if the appliance includes Guardium's Database Protection Subscription service.
• D.Yes, however this particular test is only available for IBM DB2 and Informix servers.

What is the effect of enabling the Log Policy Violation option when creating a new correlation alert?

• A.A policy violation is logged when this alert is triggered, so it may be viewed alongside real-time alerts in the Policy Violations domain.
• B.The Guardium administrator is automatically notified whenever this alerts occurs.
• C.All following occurrences of this specific alert are ignored.
• D.This is not an option available in the alert definition tab of the user interface.

What is Guardium's Database Protection Subscription Service?

• A.A subscription to the latest updates for the various Guardium product components.
• B.A service that provides the Guardium instance with quarterly updates to its builtinassessment tests, so the assessment is up-to-date withindustry best practices and newvulnerabilities.
• C.A service that may be purchased separately in orderto enable Guardium to safeguarddatabase management systems other than Sybase AES.
• D.An additional package required for the vulnerability andthreat management solutions tointegrate with CAS.

What is the simplest definition of a Guardium domain?

• A.A model of a Guardium system describing the different entities involved in the environment and their relationships.
• B.A Guardium entity containing a series of attributes.
• C.Grouping of a set of tables and relationships between those tables providing a view of the data that Guardium stores.
• D.A simple identification label to indicate ownership or control of a Guardium resource.