Reading study notes is one thing; sitting a timed exam is another. 2Pass4sure's desktop and online test engines recreate the pressure of the C2150-620 testing environment, so the IBM Security Network Protection (XGS) V5.3.2 System Administration exam feels familiar long before exam day arrives.

IBM C2150-620 Exam Overview:

IBM C2150-620 Exam Syllabus Topics:

Answers to the Most Common Questions About IBM Security Network Protection (XGS) V5.3.2 System Administration

IBM Security Network Protection (XGS) V5.3.2 System Administration Sample Questions:

Question 1

A System Administrator want to configure an XGS so that only when the SQL_Injection security event is enabled in the IPS policy and triggered, the XGS performs a packet capture of the complete connection from the point of the event triggering.
How should the System Administrator configure the XGS?

A. Edit the SQL_Injection security event within the IPS policy and apply a response to capture the connection.
B. Create an IPS Filter Policy object for the SQL_Injection security event and apply a response to capture the connection.
C. Create a Network Access policy object with a capture connection response object for the SQL_Injection security event.
D. Edit the IPS object that contains the SQL_Injection security event and apply a response to capture the connection.

Question 2

A System Administrator wants to configure an XGS so that when the SSH_Brute_Force security event is triggered against machine Server1, any further traffic from the source IP address contained in the security event alert is dropped for a timed period.
How should the System Administrator configure the XGS to perform this?

A. Create a Network Access policy object with a quarantine rule to block the source IP when the security event is triggered against Server1.
B. Edit the properties of the SSH_Brute_Force security event and create a quarantine response to block the source IP.
C. Create an IPS Filter policy object for the SSH_Brute_Force security event with a Victim address of Server1 and a quarantine response to block the source IP
D. Create a Network Access policy object to drop all traffic from the source IP contained in the security event alert to Server1.

Question 3

A company wants to implement user authentication for access to HTTP/HTTPS services against active directory using a single domain controller and multiple XGS appliances.
Which authentication deployment method should be used to achieve this?

A. Deploy user authentication through the User Authentication Portal to prompt users for their Active Directory credentials.
B. Deploy user authentication through the User Authentication Portal to prompt users for local XGS user credentials.
C. Deploy passive authentication to authenticate users automatically using local XGS user credentials.
D. Deploy passive user authentication to authenticate users automatically when they log on to the network using Active Directory.

Question 4

The System Administrator of a financial company wants to control the network traffic during office hours, for example, social networking or streaming media traffic are forbidden during business hours (08:00-19:00) but are permitted after 19:00 from Monday to Friday. The consultant from an IBM business partner suggested that the Schedule Object in Network Access Policy could be used to fulfill this objective.
Which three parameters are required to create this Schedule Object? (Choose three.)

A. Daily
B. Comment
C. Expiration Date
D. Start Time
E. Activation Date
F. End Time

Question 5

A System Administrator wants to configure an XGS to send all IPS security event alerts to a remote system using Syslog.
How should the System Administrator configure the XGS?

A. Edit the Network Access policy object and add a 'Remote Syslog' response object.
B. Edit the signatures inside the IPS Policy object and add a 'Remote Syslog' response object.
C. Edit the IPS Policy object and add a 'Remote Syslog' response object.
D. Configure 'System Alerts' with 'Remote Syslog' response objects.

Solutions: