IBM Security Network Intrusion Prevention System V4.3 Implementation Sample Questions:

1. John is currently responsible for maintaining a group of IBM Security Network Intrusion Prevention System appliances at his business location. His manager would like to allow all members of their network security team to access the appliances in case John is out of the office, but there is concern about possible security issues. So the manager would like to limit administrative access to the users and also wants those users not to share a common password. After further thought, John's manager would also prefer that only a few of the team members have console access while limiting the rest to Web interface access only. What must John do next?

A) Nothing, the requested configuration is not possible.
B) Add additional root access user accounts in the SSH Configuration menu.
C) Modify the user accounts in the Accounts and Password policy.
D) Change the Remote Authentication Server Usage configuration for the Web interface only users.

2. What are two restrictions placed on remote users using IBM Security Network Intrusion Prevention System V4.3? (Choose two.)

A) They cannot change the local user account passwords.
B) They cannot log in to the local console.
C) They cannot save changes to policies in the Web interface.
D) They cannot reboot the appliance.
E) They cannot log in to the appliance when the authentication server is down.

3. What is the purpose of the Firewall Rules policy?

A) To create security events based on connection information.
B) To review rules generated in response to detected intruder events and to manually add new ones.
C) To define how and when packets are captured and stored for general network analysis.
D) To configure rules to drop or block traffic based on various source and target information in the packet.

4. What are the correct steps to backing up the firmware configuration on an IBM Security Network Intrusion Prevention System V4.3 appliance?

A) connect a USB CD-ROM and locally connect to the appliance via a terminal emulation program, reboot the appliance, and use the backup utility from the PXE boot server
B) connect to the appliance using a serial cable, log in as admin, and from the Configuration menu select Appliance Management and then select Backup Current Configuration
C) connect remotely to the appliance using a Web browser to the Local Management Console (LMI), log in as admin, navigate to the configuration link on the left menu, select Backup Configuration, and select a location to save the backup file
D) connect to the appliance remotely using SSH terminal, log in as root from the command line, and use the command backup configuration

5. How is the IBM Security Network Intrusion Prevention System V4.3 (Network IPS) health status checked using the IBM Security SiteProtector System Console?

A) right-click on the group where the Network IPS is managed and select Status
B) the Network IPS health status is only available from the Local Management Interface
C) right-click on the Network IPS in the Asset view and select Properties
D) right-click on the Network IPS agent in the Agent view and select Properties

Solutions: