000-896 Exam Questions

IBM 000-896 IBM Tivoli Compliance Insight Manager V8.0 Implementation 134 Q&A Version: I9.0 www.CertifyMe.com

CertifyMe - King of Computer CertificationImportant Information, Please Read CarefullyOther CertifyMe productsA) Offline Testing engineUse the offline Testing engine product to practice the questions in an exam environment.B) Study Guide (not available for all exams)Build a foundation of knowledge which will be useful also after passing the exam.Latest VersionWe are constantly reviewing our products. New material is added and old material isupdated. Free updates are available for 90 days after the purchase. You should check yourmember zone at CertifyMe and update 3-4 days before the scheduled exam date.Here is the procedure to get the latest version:1.Go towww.certifyme.com2.Click on Member zone/Log in (right side)3. Then click My Account4.The latest versions of all purchased products are downloadable from here. Just click thelinks.For most updates,it is enough just to print the new questions at the end of the new version, not thewhole document.FeedbackIf you spot a possible improvement then please let us know. We always interested inimproving product quality.Feedback should be send to feedback@certifyme.com. You should include the following:Exam number, version, page number, question number, and your login ID.Our experts will answer your mail promptly.CopyrightEach PDF file contains a unique serial number associated with your particular name andcontact information for security purposes. So if we find out that a particular PDF file isbeing distributed by you, CertifyMe reserves the right to take legal action against youaccording to the International Copyright Laws.ExplanationsThis product does not include explanations at the moment. If you are interested inproviding explanations for this exam, please contact feedback@certifyme.com. www.CertifyMe.com

1. After IBM Tivoli Compliance Insight Manager is configured on an AIX platform, what is the default locationfor the audit trail files?A. /var/auditB. /var/log/auditC. /var/log/epriseD. /var/audit/epriseAnswer: C2. What is the purpose of scoping?A. to regulate access to GEM databasesB. to regulate access to policies in the policy explorerC. to regulate access to information generated in reportsD. to regulate access to the Tivoli Compliance Insight Manager Web portalAnswer: C3. What is the advantage of collect-time data processing for a GEM database?A. Chunks are mapped as soon as they are collected.B. Chunks are mapped and loaded as soon as they are collected.C. Reports are readily available in iView as soon as the chunks are collected.D. Processing of chunks is performed at collection time to prevent loss of information when the IBM TivoliCompliance Insight Manager server is accidentally rebooted.Answer: A4. Which components are installed by default for a Standard server?A. Tivoli Compliance Insight Manager server, Tivoli Compliance Insight Manager Management Console,and Tivoli Compliance Insight Manager ConsolidationB. Tivoli Compliance Insight Manager server, Tivoli Compliance Insight Manager Web Applications, andTivoli Compliance Insight Manager Management ConsoleC. Tivoli Compliance Insight Manager server, Tivoli Compliance Insight Manager Web Applications, TivoliCompliance Insight Manager Management Console, and Tivoli Compliance Insight Manager ActuatorD. Tivoli Compliance Insight Manager server, Tivoli Compliance Insight Manager Web Applications, TivoliCompliance Insight Manager Management Console, and Tivoli Compliance Insight Manager ConsolidationAnswer: B5. From which two Tivoli products can IBM Tivoli Compliance Insight Manager v8.0 retrieve informationusing User Information Source? (Choose two.)A. Tivoli Identity ManagerB. Tivoli Access ManagerC. Tivoli Directory Integrator www.CertifyMe.com

D. Tivoli Security Operations ManagerE. Tivoli Access Manager for Enterprise Single Sign-OnAnswer: AB6. A customer wants to use several groups from an Active Directory User Information Source to define thepolicy. How can this goal be accomplished?A. Drag Active Directory Groups from the View Automatic Policy.B. Collect the grouping information from the Active Directory using W7 Log and use them in the policy.C. Copy and paste the name of the Groups from the Domain Controller Users and Group Managementview.D. Import the Active Directory group names into the Grouping Wizard by using an LDAP data interchangeformat (LDIF) file.Answer: A7. Which IBM Tivoli Compliance Insight Manager component provides the capability to report against theISO 17799 standard?A. Audit policyB. Log ManagerC. Compliance moduleD. Management ConsoleAnswer: C8. What is the procedure to verify that the diagnostics file has been successfully generated?A. Run the Diagnostics under the Administrator account.B. The only method is to check whether the Diagnostics Application ended without reporting any message.C. Check whether a fresh copy of Diagnostics file with the correct file extension has been created in thedestination folder.D. Check whether the Diagnostics Application has provided a dialog message reporting that the diagnosticsfile was successfully generated.Answer: C9. What does the error retention property in the z/OS event source define?A. sets of error files maintained in each *.err directoryB. sets of error files maintained in each *.etc directoryC. sets of log files maintained in each *.props directoryD. sets of log files maintained in each *.property directoryAnswer: C10. What are two advantages of using Secure Shell (SSH) remote collection? (Choose two.)A. Can have an SSH Collection user as a non-root account www.CertifyMe.com

B. Can be used to collect logs remotely from any event sourceC. Uses secure user name-password authentication during collectionD. Reduces maintenance costs in terms of agent installation and upgradeE. Requires less number of ports to be opened on the firewall when compared to IBM Tivoli ComplianceInsight Manager-point of presence communication port requirementsAnswer: AD11. What action could be performed to determine if the point of presence is listening?A. From the Management Console, click Test IP and Port.B. From the Management Console, double-click machine plus Network.C. From a command window, execute the tracer machine 5992 command.D. From a command window, execute the ping command to the point of presence.Answer: A12. When are the alert events processed and delivered?A. when a Windows scheduled task is runB. when the Event source log files are collectedC. when the mainmapper process maps collected events during a manual loadD. when the mainmapper maps the collected events for a scheduled GEM databaseAnswer: D13. Which statement about the universal event source (w7Log) is true?A. Uses the getnewrecs script to collect the audit trail.B. Keeps track of the last record read in the audit trail.C. A regular expression is used to specify the path to the log file.D. Provides the ability to collect, load, and map a custom audit trail.Answer: D14. On which systems can an IBM Tivoli Compliance Insight Manager Compliance Module be installed?A. on a system where an IBM Tivoli Compliance Insight Manager Management Console is installedB. on a system where an IBM Tivoli Compliance Insight Manager point of presence has been installedC. on any HTTP server where the IBM Tivoli Compliance Insight Manager Runtime environment has beeninstalledD. on any system where IBM Tivoli Compliance Insight Manager Web Applications components have beeninstalledAnswer: D15. Click the Exhibit button.An event initiated by a user with the logon name joe will be categorized under which Who group or groups? www.CertifyMe.com

A. Database AdminB. End User, ePHI UsersC. Database Admin, End UserD. Database Admin, End User, ePHI UsersAnswer: A16. Which account is used to invoke the remote installation of a Windows Point of Presence?A. Windows SYSTEM accountB. IBM Tivoli Compliance Insight Manager administrator (default is cearoot)C. A user defined account with administrative authority on the target machineD. IBM Tivoli Compliance Insight Manager Server service runas account (default is DOMAINcearoot)Answer: C17. Which configuration file contains entries for the Standard servers that are registered with an Enterpriseserver?A. beat.iniB. cluster.iniC. aggregation.iniD. consolidation.iniAnswer: A18. On a Microsoft Windows platform, what is the main weakness in the audit system?A. User access to files is not logged.B. Administrator access to files is not logged.C. File open and closes are logged, but file read and writes are not.D. File read and writes are logged, but file open and closes are not.Answer: C19. Which two options are valid data-processing properties? (Choose two.)A. scheduled loadB. load time mapping www.CertifyMe.com

C. collect size mappingD. collect time mappingE. selective sources loadAnswer: BD20. A Cisco PIX Syslog real-time event source has the Source Address property set to the asterisk (*).Which statement is true?A. The point of presence can receive SNMP messages from Cisco PIX devices.B. The point of presence can receive real-time messages from any Cisco PIX device.C. No syslog messages are received because * (asterisk) is not a valid IP address or host name.D. The point of presence can receive reliable syslog messages from Cisco PIX devices over TCP.Answer: B21. Where is collection activity for an Actuator logged on the point of presence?A. client.logB. collect.logC. actuator.logD. actuatorXXX.logAnswer: D22. Which of the following actions occurs with a UNIX hotfix installation?A. File modifications are rolled back when the hotfix installation fails.B. Hotfix script aborts when a higher hotfix has already been installed.C. The hotfix number in the register.ini is registered in the point of presence (POP) installation folderD. The register.ini updates on the IBM Tivoli Compliance Insight Manager server after the hotfix installationcompletes successfully.Answer: A23. The audit settings for which event sources can be configured using the Management Console?A. Windows and Microsoft SQLB. Windows and DB2 for WindowsC. Windows and Oracle for WindowsD. Windows and Sybase for WindowsAnswer: C24. What are the Oracle DAT event source properties?A. Name of DSN, SSH user, key password, user idB. Name of DSN, instance name, user id, SSH key fileC. Name of DSN, SSH key file, key password, instance nameD. Name of DSN, Name of Database view, user name, password www.CertifyMe.com

Answer: D25. Which Windows service is added when a Standard server named Server1 is registered to a cluster?A. IBM Tivoli Compliance Insight Manager Cluster Server1B. IBM Tivoli Compliance Insight Manager Indexer Server1C. IBM Tivoli Compliance Insight Manager Aggregation Server1D. IBM Tivoli Compliance Insight Manager EventMapper Server1Answer: B26. If an audited machine has been removed from the IBM Tivoli Compliance Insight Manager environment,how are imported chunks from this audited machine represented in the Management Console?A. as an active event sourceB. as an inactive event sourceC. as a remotely connected event sourceD. they are not represented in the Management ConsoleAnswer: B27. Which elements match the W7 model What?A. Logon, Logoff, Write, ReadB. Opening hours, closing hours, holidaysC. Platform XYZ, Workstation X, Workstation ZD. Workstation ABC, File X, C:/filepath/file, Printer ZAnswer: A28. Which parameter must be defined for the target machine during the Add Machine wizard to collect logslocally?A. Domain nameB. SSH private keyC. Host name or IP addressD. E-mail address of administratorAnswer: C29. Where is the audit data saved if the default path export is used?A. IBMTCIMserverexportyyyymmddlogsB. IBMTCIMdepotexportyyyymmddlogsC. IBMTCIMdepotexportyyyymmddconfigD. IBMTCIMserverexportyyyymmddconfigAnswer: A30. Which set of steps is the correct order to create and test an attention rule?A. Select the group. Drag the corresponding W7 dimension. Define the severity. Save the attention rule. www.CertifyMe.com

Load the GEM database.B. Define the severity. Drag the corresponding W7 dimension. Load the GEM database. Select the group.Save the attention rule.C. Load the GEM database. Select the group. Define the severity. Drag the corresponding W7 dimension.Save the attention rule.D. Load the GEM database. Define the severity. Select the group. Save the attention rule. Drag thecorresponding W7 dimension.Answer: A31. From where can the Ubiquitous Log Event Source be collected?A. only using remote Secure Shell (SSH)B. only from the IBM Tivoli Compliance Insight Manager serverC. from any point of presence and using Windows Remote CollectD. from both the IBM Tivoli Compliance Insight Manager server and any point of presenceAnswer: D32. Which Log Manager option can help identify malicious attacks on audited platforms?A. HistoryB. ActivityC. RetrievalD. ContinuityAnswer: B33. What is the name of the IBM Tivoli Compliance Insight Manager v8.0 repository where the audit logs ofevent sources are stored after collection?A. DepotB. ArchiveC. CollectorD. RepositoryAnswer: A34. From the URL http://localhost/portal, the user logs in to the IBM Tivoli Compliance Insight Manager Webportal on the IBM Tivoli Compliance Insight Manager server such as localhost and encounters an error.What could be the likely cause?A. URL is incorrect.B. IBM Tivoli Compliance Insight Manager iView service is not functioning.C. IBM Tivoli Compliance Insight Manager Server Service is not functioning.D. The customer does not have authority to access the IBM Tivoli Compliance Insight Manager portal loginpage. www.CertifyMe.com

Answer: A35. When attempting to commit a draft policy, the commit option is not available. What could cause thisproblem?A. The draft policy is in read-only mode.B. The policy is open in another window.C. A policy with the same name has already been committed.D. The user attempting to commit the policy is not assigned the Edit Security Policy role.Answer: B36. Which three IBM Tivoli Compliance Insight Manager v8.0 Windows NT/2000/XP/2003 log files arerelevant when verifying a manual Actuator installation? (Choose three.)A. <Home Directory>logSetup.logB. <Home Directory>InstallCeA.logC. <Home Directory>ApplyPatch.logD. <Home Directory>Serverauditctl.logE. all installation log files in the <Home Directory>Actuatorsupport directoryF. all installation and plugger install log files in the <Home Directory>Actuatorlog directoryAnswer: BCF37. Between which components does Database sqlnet2 use port 1521?A. the Enterprise server and Standard serverB. the Standard server and the Syslog collectorC. the Standard server and the point of presenceD. the Syslog collector and the point of presenceAnswer: A38. Assuming that an automated report distribution task runs three times a week (Sunday, Tuesday, andThursday), the related database loads once a week (Saturday), and the related event source collects logstwice a week (Monday and Thursday), how many non-empty reports would be distributed in a week?A. 1B. 2C. 3D. 5Answer: A39. Where can the Web applications log files be found?A. IBMTCIMiviewlogB. IBMTCIMserverlogC. IBMTCIMiviewtomcatlogs www.CertifyMe.com

Pass Your Exam at First Attempt with 100% Pass Guarantee Buy Full Version of 000-896 Exam at http://www.certifyme.com/000-896.htm

000-896 Exam Questions

by madie36

Accessibility

Categories

Upload Details

Usage Rights

Statistics

000-896 Exam Questions Document Transcript