Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam C2150-606 topic 1 question 29 discussion

Actual exam question from IBM's C2150-606
Question #: 29
Topic #: 1
[All C2150-606 Questions]

During a Guardium deployment planning meeting, a database administrator indicated that the mission critical databases were clustered.
How should the Guardium administrator handle S-TAP installation and configuration with respect to clustered databases?

  • A. Install S-TAP agents on all active nodes. Set ALL_CAN_CONTROL=1 to failover the S-TAP process to the passive nodes when a database failover occurs.
  • B. Install S-TAP agents on all active nodes. Set WAIT_FOR_DB_EXEC=-1 to set the agent process to failover to the passive node when a database failover occurs.
  • C. Install S-TAP agents on all active and passive nodes. Set ALL_CAN_CONTROL=0 to disable all passive nodes until a database failover occurs.
  • D. Install S-TAP agents on all active and passive nodes: Set WAIT_FOR_DB_EXEC>0 on all nodes to start S-TAP processes without waiting for a correct DB
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
To properly support load balancing, the Guardium S-TAP agents must be configured properly.
Add, uncomment, or modify the settings on your S-TAP Configuration to look like the following examples.
See the Guardium product documentation on how and where to adjust the S-TAP configuration file, as well as for updated guidance from IBM.
* Sqlguard_ip = <Your BIG-IP Virtual Server IP address/hostname>
For example: Sqlguard_ip = 192.0.2.123
* Participate_load_balancing = 3
* All_can_control = 1
Sqlguard_ip is the address you will define on BIG-IP LTM during the Virtual Server configuration.
Participate in Load balancing allows the S-TAP to send session information on every failover to the appliance.
All Can Control allows the S-TAP to be able to edit S-TAP configurations through GUI.

Note: all_can_control -
. 0=S-TAP can be controlled only from the primary Guardium system. 1=S-TAP can be controlled from any Guardium system.
Reference: https://www.f5.com/pdf/deployment-guides/ibm-guardium-dg.pdf

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
kevinpio
3 years, 4 months ago
I think the correct answer is C.
upvoted 1 times
...
Wen
4 years, 6 months ago
ALL_CAN_CONTROL: . 0=S-TAP can be controlled only from the primary Guardium system. 1=S-TAP can be controlled from any Guardium system. WAIT_FOR_DB_EXEC: S-TAP can be configured for delayed loading by setting a configuration file property, WAIT_FOR_DB_EXEC. When starting, if S-TAP finds that there is no access to the database home, it checks the WAIT_FOR_DB_EXEC value, and takes the appropriate action. . WAIT_FOR_DB_EXEC > 0, S-TAP starts regardless of whether or not it can start process name. It tries to start process name every 15 minutes . WAIT_FOR_DB_EXEC < = 0 S-TAP tries to start process name in inspection engine immediately after it comes up. If it cannot start process name, S-TAP exits. So, the correct answer should be B
upvoted 3 times
Sa123
3 years, 7 months ago
When we have clustered databases, we need to install STAP agents on all active and passive nodes, not only active?
upvoted 1 times
...
RAJOO
3 years, 6 months ago
if the correct answer is B, It should include to install S-TAP on passive nodes too to be able to talk to Guardium Collector after failover. if there is no S-TAP installed on Passive nodes then how come the failover will work and how can guardium will be able to connect to that Passive node?
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...