IBM Security QRadar V7.3.1 Fundamental Administration — Question 20

The guard_tap.ini of a UNIX S-TAP is configured with the following parameters: firewall_installed=1 firewall_fail_close=1 firewall_default_state=1 firewall_timeout=10
The collector that this S-TAP is sending data to has become unavailable and there is no failover option configured. A Guardium administrator must communicate the impact of this outage to users of the monitored database.
What should the administrator advise is the expected behavior for a database session?

Answer options

• A. The session will not experience any latency or termination.
• B. No SQL can be executed and after 10 seconds the session will be terminated.
• C. In the first 10 seconds of the session SQL can be executed, then the session is terminated.
• D. In the first 10 seconds of the session no SQL can be executed, then the session will work as normal.

Correct answer: C

Explanation

The correct answer is C because the firewall_timeout parameter is set to 10 seconds, allowing SQL execution initially before terminating the session. Option A is incorrect as there will be a termination after 10 seconds. Option B is wrong because SQL can be executed for the first 10 seconds. Option D is also incorrect since SQL can be executed in the beginning, not blocked.