IBM InfoSphere Guardium Technical Mastery Test v2 - P2090-739 Exam Questions [2026]

QUESTION NO: 1
What is CAS?

A. An optional agent installed on the collector that monitors the database server for entity changes. B. An agent that acts as the main component of the Central Audit System. C. An agent installed on the database server that reports to the collector whenever a monitored entity, such as a file, environment variable or script output has changed. D. An agent installed on the database server that reports to the collector whenever a monitored database's version has changed through upgrades or patch installs.

Correct Answer: C

QUESTION NO: 2
A developer has recently created a temporary database to test her new human resourcesmanagement application. To test it in a production-like environment she copies the MANAGERStable from the production server into her test database. This table includes sensitive personalinformation. Which of the following will help the database auditor identify this new database?

A. The developer must create the new database using Guardium's Application Events API, which would show up on the Guardium interface as a change report. B. The auditor cannot incorporate the new environment into Guardium unless she is given the exact details of the database and host system. C. The database auditor can be notified of new sensitive data by a previously scheduled sensitive object discovery job. D. The database auditor can be notified by e-mail using Guardium's scheduled database auto-discovery feature.

Correct Answer: D

QUESTION NO: 3
Guardium can work on heterogeneous environments, therefore, which architectures aresupported by an S-TAP agent?

A. Linux, zOS, jSeries, Windows B. Windows, Unix, Linux,Mac C. Windows, Linux, Android, zOS D. iSeries, Linux, zOS, Windows

Correct Answer: D

QUESTION NO: 4
What is a Guardium vulnerability assessment (VA)?

A. A piece of software distributed as a multi-platform plug-in that allows a supporteddatabase management system to constantly monitor potential threats and report on theseperiodically. B. An optional service from Guardium where a security specialist visits a customer's sitebefore a proof-of-concept engagement to determine the customer's specific requirements. C. A test that employs state-of-the-art algorithms to determine the potential risks of yournetwork. D. A series of predefined and custom tests that allow customers to automatically identify andaddress database vulnerabilities.

Correct Answer: D

QUESTION NO: 5
In a Guardium environment where data servers can talk to the collector, what is the relationshipbetween the S-TAP and the collector appliance?

A. There is no relationship since the S-TAP and the collector are incompatible Guardium entities. B. A collector can only interact with one S-TAP for policy management and auditing. C. The collector sends the S-TAP information about its policies so it knows what traffic to intercept. D. The S-TAP reports database activity to the collector for policy management and auditing.

Correct Answer: D