Exam C2150-606 topic 1 question 29 discussion

Actual exam question from IBM's C2150-606

Question #: 29
Topic #: 1

During a Guardium deployment planning meeting, a database administrator indicated that the mission critical databases were clustered.
How should the Guardium administrator handle S-TAP installation and configuration with respect to clustered databases?

A. Install S-TAP agents on all active nodes. Set ALL_CAN_CONTROL=1 to failover the S-TAP process to the passive nodes when a database failover occurs.
B. Install S-TAP agents on all active nodes. Set WAIT_FOR_DB_EXEC=-1 to set the agent process to failover to the passive node when a database failover occurs.
C. Install S-TAP agents on all active and passive nodes. Set ALL_CAN_CONTROL=0 to disable all passive nodes until a database failover occurs.
D. Install S-TAP agents on all active and passive nodes: Set WAIT_FOR_DB_EXEC>0 on all nodes to start S-TAP processes without waiting for a correct DB

Show Suggested Answer

Suggested Answer: A 🗳️
To properly support load balancing, the Guardium S-TAP agents must be configured properly.
Add, uncomment, or modify the settings on your S-TAP Configuration to look like the following examples.
See the Guardium product documentation on how and where to adjust the S-TAP configuration file, as well as for updated guidance from IBM.
* Sqlguard_ip = <Your BIG-IP Virtual Server IP address/hostname>
For example: Sqlguard_ip = 192.0.2.123
* Participate_load_balancing = 3
* All_can_control = 1
Sqlguard_ip is the address you will define on BIG-IP LTM during the Virtual Server configuration.
Participate in Load balancing allows the S-TAP to send session information on every failover to the appliance.
All Can Control allows the S-TAP to be able to edit S-TAP configurations through GUI.

Note: all_can_control -
. 0=S-TAP can be controlled only from the primary Guardium system. 1=S-TAP can be controlled from any Guardium system.
Reference: https://www.f5.com/pdf/deployment-guides/ibm-guardium-dg.pdf

by Wen at Aug. 30, 2019, 4:15 p.m.

Comments

Submit Cancel

kevinpio

4 years, 5 months ago

I think the correct answer is C.

upvoted 1 times

...

Wen

5 years, 8 months ago

ALL_CAN_CONTROL: . 0=S-TAP can be controlled only from the primary Guardium system. 1=S-TAP can be controlled from any Guardium system. WAIT_FOR_DB_EXEC: S-TAP can be configured for delayed loading by setting a configuration file property, WAIT_FOR_DB_EXEC. When starting, if S-TAP finds that there is no access to the database home, it checks the WAIT_FOR_DB_EXEC value, and takes the appropriate action. . WAIT_FOR_DB_EXEC > 0, S-TAP starts regardless of whether or not it can start process name. It tries to start process name every 15 minutes . WAIT_FOR_DB_EXEC < = 0 S-TAP tries to start process name in inspection engine immediately after it comes up. If it cannot start process name, S-TAP exits. So, the correct answer should be B

upvoted 3 times

Sa123

4 years, 8 months ago

When we have clustered databases, we need to install STAP agents on all active and passive nodes, not only active?

upvoted 1 times

...

RAJOO

4 years, 7 months ago

if the correct answer is B, It should include to install S-TAP on passive nodes too to be able to talk to Guardium Collector after failover. if there is no S-TAP installed on Passive nodes then how come the failover will work and how can guardium will be able to connect to that Passive node?

upvoted 1 times

...

Exam C2150-606 All Questions

View all questions & answers for the C2150-606 exam

Exam C2150-606 topic 1 question 29 discussion

Comments

kevinpio

Wen

Sa123

RAJOO

SY0-701