IBM DataPower Gateway v10.x Administrator - Professional

QUESTION NO: 1
When setting up a new DataPower appliance, which of the following actions should be taken to secure the appliance after the initial configuration?

A. Enable password policies and configure Role-Based Management (RBM) settings B. Disable external access to the appliance until security policies are set C. Set up internal DNS resolution for easy appliance management D. Configure the external IP address and connect to the internet

Correct Answer: A

QUESTION NO: 2
Which of the following actions will help you troubleshoot a network connection issue where a DataPower appliance cannot communicate with external services?

A. Temporarily disable the external network interface to prevent unauthorized access B. Check the appliance's memory usage to ensure it is not overloaded C. Inspect the network interface configuration and verify correct settings D. Perform a network load balancing test to check for traffic distribution across multiple interfaces

Correct Answer: C

QUESTION NO: 3
What is the first step in setting up a new DataPower appliance for use in a production environment?

A. Perform a secure backup to ensure configurations are preserved B. Install the latest firmware update to ensure the appliance is running the latest version C. Configure the network settings and ensure the appliance has access to the required network D. Run a system diagnostic to check for hardware issues

Correct Answer: C

QUESTION NO: 4
Scenario: While securing a DataPower appliance in a multi-environment configuration, you must ensure that sensitive data is protected during transmission.
What two actions should you take to enhance the security of data in transit? (Choose two)

A. Enable SSL/TLS encryption for all external-facing services B. Regularly review and update cryptographic algorithms to ensure they are up-to-date C. Use VPN tunnels to secure communication between internal and external systems D. Disable SSL and use plain text for all communications for better performance

Correct Answer: A,C

QUESTION NO: 5
When configuring a DataPower appliance for high availability, what type of IP address should be assigned to both appliances in the high-availability pair?

A. A static IP address on each appliance B. A shared virtual IP address C. A dynamic IP address D. A floating IP address

Correct Answer: B

QUESTION NO: 6
To protect sensitive information on the DataPower appliance, which of the following actions should be implemented to manage cryptographic material securely?

A. Disable encryption and rely on network security B. Configure weak encryption methods to speed up processing C. Use hard-coded encryption keys in appliance configurations D. Store cryptographic material in an HSM (Hardware Security Module)

Correct Answer: D

QUESTION NO: 7
Which diagnostic tool would you use to perform an in-depth analysis of network performance on the DataPower appliance?

A. Resource utilization graphs B. Debug log analysis C. SNMP monitoring D. Packet capture

Correct Answer: D

QUESTION NO: 8
What is the primary purpose of generating an error report in DataPower?

A. To restart the DataPower appliance automatically in case of failures. B. To reset all configurations to their default settings for error resolution. C. To provide real-time monitoring of system performance without storing logs. D. To capture system logs, configuration details, and diagnostic information for troubleshooting issues.

Correct Answer: D

IBM DataPower Gateway v10.x Administrator - Professional - C1000-196 Exam Questions