IBM 000-561 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Troubleshooting and Maintenance | - System diagnostics and log analysis - Common deployment issues |
| Policy Management | - Threat protection policies - Signature management and updates |
| Monitoring and Analysis | - Event monitoring and reporting - Traffic analysis and logging |
| Installation and Initial Configuration | - System prerequisites and setup - Initial policy and sensor configuration |
| IBM Security Network Intrusion Prevention System Overview | - Architecture and core components - Deployment models and positioning |
| Tuning and Optimization | - False positive reduction techniques - Performance tuning of IPS policies |
IBM Security Network Intrusion Prevention System V4.3 Implementation Sample Questions:
1. An administrator has two user defined events with identical names. One is assigned to a global protection domain and the other is assigned to a custom protection domain. Which protection domain reports the generated event?
A) The event would be generated from the global protection domain because it overrides the custom protection domain policy.
B) The event would generate two separate events, one from the global protection domain and the other from the custom protection domain.
C) The event would not fire because the appliance would not know how to parse conflicting protection domain policy user-defined events.
D) The event would be generated from the custom protection domain because it overrides the global protection domain policy.
2. Which two user notification response object types are available in IBM Security Network Intrusion Prevention System V4.3? (Choose two.)
A) Voicemail
B) Remedy
C) SNMP Trap/Inform
D) E-mail
E) SMS
3. Where can the logs for IBM Security Network Intrusion Prevention System be downloaded?
A) in the SSH Configuration menu select Appliance Management
B) in the Local Management Interface select the Review Analysis tab and select Logs and Packet Captures
C) in the IBM Security SiteProtector System (SiteProtector) Agent View right-click Select Properties
D) in the SiteProtector Console select the System Log Download Utility
4. What is the maximum network throughput that IBM Security Network Intrusion Prevention System V4.2 can support?
A) 23G
B) 8G
C) 4G
D) 10G
5. What is the best Attack Prevention Method that identifies and stops malicious code based on behavior rather than matching a particular attack signature or pattern?
A) Content Analysis
B) Shellcode Heuristics
C) TCP Reassembly
D) Flow Assembly
Solutions:
| Question # 1 Answer: D | Question # 2 Answer: C,D | Question # 3 Answer: B | Question # 4 Answer: A | Question # 5 Answer: B |
0 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
