IBM Security Network Intrusion Prevention System V4.3 Implementation

QUESTION NO: 1
An administrator has reimaged an IBM Security Network Intrusion Prevention System V4.3 (Network IPS) without unregistering it from IBM Security SiteProtector System (SiteProtector) and has reconfigured it identically. It has resulted in duplicate agents listed in the Agent view in SiteProtector with one of them in offline status. Why?

A. SiteProtector uses an agent GUID to recognize Network IPS devices and when this GUID changes it is registered as a new device. B. When an agent heartbeats in, SiteProtector does not check to see if the agent already exists before adding it as an agent. C. SiteProtector uses the agent name to recognize the Network IPS device and when the name changes it is registered as a new device. D. When an agent heartbeats in, it will register the device as a new agent even if SiteProtector has already registered it.

Correct Answer: A

QUESTION NO: 2
What is the correct cabling option (transceiver) that can be implemented in a GX7800 appliance?

A. Copper 1G cabling is not supported. B. All ports can be for a 1G network. C. The first four segments are 10G LR/SR and the others must be for a 1G network. D. All ports must be a mix of 10G LR and SR transceivers.

Correct Answer: B

QUESTION NO: 3
Using IBM Security Network Intrusion Prevention System V4.3, what occurs after clicking Install Now when updating the firmware?

A. The firmware update runs, the appliance reboots, and the browser reconnects when it completes. B. The firmware update runs and may reboot the appliance. C. The firmware update runs, a system backup is created, and the appliance may reboot. D. A System Backup window will open with a Skip option.

Correct Answer: B

QUESTION NO: 4
Where is the segment's mode configured in the Local Management Interface?

A. from the Manage Systems Settings, select Security Interfaces B. from the Network Dashboard, right-click on the segment, select Mode, and click Deploy C. from the Secure Protection Settings, select Security Interfaces D. from the Home Dashboard, right-click on the segment, select Mode, and click Save

Correct Answer: A

QUESTION NO: 5
Instead of downloading updates directly from the Internet, an administrator wants to have the IBM Security Network Intrusion Prevention System V4.3 appliance download updates through their local X-Press Update Server. Which TCP port for outbound traffic from the appliance to the X-Press Update Server would the administrator have to make accommodations for on any firewall?

A. port 3994 B. port 443 C. port 2998 D. port 3995

Correct Answer: A

QUESTION NO: 6
What is required prior to changing a segment's mode from inline simu-lation to inline protection?

A. Segment ports must be active and traffic through the segment must be verified. B. Any protection policies for the segment must be deployed. C. Access rights to modify the policy for Segment mode. D. The segment must first be configured in Monitor mode.

Correct Answer: C

QUESTION NO: 7
To properly utilize the dual network processors, what is the best installation option for a mix of 1G and 10G cabling for a GX7800?

A. All even ports must be 10G. B. A mix of 10G and 1G cables is not supported. C. The first ports must be 10G followed by 1G. D. All odd ports must be 10G.

Correct Answer: C

QUESTION NO: 8
While logged in as root into an IBM Security Network Intrusion Prevention System V4.3 appliance, which command allows real time viewing of log file activity?

A. tail -f B. grep 'error' C. vi D. search -e

Correct Answer: A

QUESTION NO: 9
Which method restores an IBM Security Network Intrusion Prevention System V4.3 appliance to the factory defaults?

A. connect to the appliance locally via a Web browser, log in as admin, and from the Local Management Interface (LMI) select the Configuration link on the left menu > Restore to Factory Default (unconfigured) B. connect to the appliance remotely via SSH, log in as admin, and from the Configuration menu select Appliance Management > Restore to Factory Default (unconfigured) C. from the LCD panel located in the front of the appliance, select Menu > Configuration > Restore to Factory Default (unconfigured) D. connect to the appliance remotely via SSH, log in as root, and in the command line type restore Factory_default_configuration -i -u

Correct Answer: B

QUESTION NO: 10
Which file can be imported or compiled, and defines the format of SNMP traps for security events responses in the IBM Security Network Intrusion Prevention System appliance?

A. ibm.mib B. snmp.mib C. iss.mib D. linux.mib

Correct Answer: C

IBM Security Network Intrusion Prevention System V4.3 Implementation - 000-561 Exam Questions