IBM C2150-561 Actual Free Exam Questions & Community Discussion

Exam Code/Number: C2150-561
Exam Name/Title: IBM Security Network Intrusion Prevention System V4.3 Implementation
Certification Provider: IBM
Corresponding Certification: IBM Specialist

Exam Questions: 92
Updated On: Jun 02, 2026

Question #21

A customer wants to change the severity of an IBM Protocol Analysis Module signature from high to low in a given protection domain. Which policy meets this requirement?

A. System Updates

B. X-Force Virtual Patch

C. Open Signatures

D. Security Events

Discussion 0

Correct Answer: D Vote an answer

Question #22

Which file is accessed on the IBM Security Network Intrusion Prevention System V4.3 appliance to determine why it is Active with Errors in IBM Security SiteProtector System?

A. Engine0 log file

B. Boot log file

C. Kernel log file

D. Messages log file

Discussion 0

Correct Answer: D Vote an answer

Question #23

An administrator has restored the IBM Security Network Intrusion Prevention System V4.3 (Network IPS) from a backup and the device has gone offline in IBM Security SiteProtector System (SiteProtector). What is the most likely reason?

A. The device was not backed up while it was managed with SiteProtector.

B. The iss-spa process has crashed.

C. Restored backups cause the SiteProtector Agent Manager to no longer recognize Network IPS devices.

D. The iss-spa process was stopped during the restore process.

Discussion 0

Correct Answer: A Vote an answer

Question #24

Which policy creates new security event connections to or from specific addresses or ports?

A. Firewall Rules

B. Quarantine Rules

C. Response Filters

D. Connection Events

Discussion 0

Correct Answer: D Vote an answer

Question #25

Where in the IBM Security SiteProtector System Console can a customer find the link status of the Security Interfaces on an IBM Security Network Intrusion Prevention System appliance?

A. the Intrusion Prevention section under Module Status in the appliance Properties screen

B. the networkinfo section under Module Status in the appliance Properties screen

C. the Security Interfaces section on the Health Summary Network tab in the appliance Properties screen

D. the Internal Communication section on the Health Summary System tab in the appliance Properties screen

Discussion 0

Correct Answer: B Vote an answer

Question #26

Which two user notification response object types are available in IBM Security Network Intrusion Prevention System V4.3? (Choose two.)

A. SNMP Trap/Inform

B. Remedy

C. SMS

D. E-mail

E. Voicemail

Discussion 0

Correct Answer: A,D Vote an answer

Question #27

A company just installed a new IBM Security Network Intrusion Prevention System appliance. The appliance is physically connected to three different network segments. The administrator wants to set up different policies but will need to set up different protection domains. How are the protection domains policies configured?

A. Select the interfaces for the first network segment to be monitored, under the IPv4 Addresses tab select None, and click OK when done. Repeat this sequence for the other two networks.

B. Under the VLAN tab, select Single, Range, or Comma Separated List of Virtual Local Area Networks (VLANs), and click OK when done. Repeat this sequence for the other two networks.

C. Select the interfaces for the first network segment to be monitored, leave the VLANs tab alone, click OK when done. Repeat this sequence for the other two networks.

D. Select the interfaces for the first network segment to be monitored, under the IPv4 Addresses tab select Single IPv4, IPv4 Range, IPv4 CIDR or Comma Separated List, and click OK when done. Repeat this sequence for the other two networks.

Discussion 0

Correct Answer: C Vote an answer

Question #28

Which policy is edited to configure IBM Security Network Intrusion Prevention System V4.3 to look for SQL injection attacks?

A. Data Loss Prevention

B. Web Application Protection

C. Connection Events

D. Security Events

Discussion 0

Correct Answer: B Vote an answer

Question #29

How do High Availability partners share network traffic when configured in Standard High Availability mode?

A. over the TCP reset port

B. over the management port

C. over the mirrored port

D. over the serial console port

Discussion 0

Correct Answer: C Vote an answer

Question #30

An administrator has two user defined events with identical names. One is assigned to a global protection domain and the other is assigned to a custom protection domain. Which protection domain reports the generated event?

A. The event would generate two separate events, one from the global protection domain and the other from the custom protection domain.

B. The event would be generated from the global protection domain because it overrides the custom protection domain policy.

C. The event would not fire because the appliance would not know how to parse conflicting protection domain policy user-defined events.

D. The event would be generated from the custom protection domain because it overrides the global protection domain policy.

Discussion 0

Correct Answer: D Vote an answer

Download Free IBM C2150-561 Demo

Simply submit your e-mail address below to get started with our free demo of your IBM C2150-561 exam.