IBM Tivoli Internet Security Systems Sales Mastery Test v2 (000-M225) Sample Questions:

1. A Chief Information Officer mentions an initiative to protect the data residing on the core network with Intrusion Prevention System technology. He confides that his network team already evaluated a competitor's product but had difficulty configuring and understanding the solution. His team also received little information from the evaluation.
What scenario provides the best chance for a successful IBM Security evaluation?

A) Ship a GX4004 and IBM Security SiteProtector appliance to the client's data center for evaluation.
B) Schedule a meeting with the network team to discuss IBM Security Professional Security Services offerings.
C) Deliver product data sheets and technical manuals about IBM Security Intrusion Prevention devices to the client
D) Schedule on-site meetings with an Systems Engineer to manage the deployment and configuration of IBM Security evaluation equipment

2. The Chief Security Officer of a financial services organization is updating the security infrastructure and meeting with many prospective vendors. The CSO is not interested in point solutions that do not integrate with the central management system and wants the current solutions to integrate with one another.
IBM Security can integrate which of the following?

A) Feeds from all of the devices into a central view using the Virtual Security Operations Center Portal as a Managed Service.
B) All existing point solutions and Payment Card Industry Compliance as a managed service
C) Firewall, Intrusion Prevention System, Vulnerability Scanning, Mail and Web Filtering, and Desktop Protection with a dashboard view using IBM Security SiteProtedor.
D) Solutions with Tivoli for an integrated Identity Management and Access Manager solution using the dashboard.

3. A client is implementing the project of virtualization of their server farms and feels quite confident that thanks to this technology, the company's Security stance will be improved What is the best argument to bring to the table to show the customer that this is not the case?

A) Explain how rootkits can install on the hardware and virtual network cards of the virtualization server.
B) Explain that the hypervisor is not the single point of failure of the virtualized infrastructure.
C) Explain that the threats to the virtualized servers remain and that new ones are added by having additional components.
D) Explain how the ESX management platform is the 'key to the castle".

4. At a regional security event sponsored by an IBM Business Partner, an IBM Security salesperson delivers a presentation. A client expresses significant interest in IBM Security Intrusion Prevention Systems for their 12 offices and data centers located throughout the territory.
What action should the IBM seller take?

A) Deliver a white paper on Intrusion Prevention Systems to the client that discusses the strengths of the IBM Security Network Intrusion Prevention System product line.
B) Give the client his business card and suggest that they meet later.
C) Work with the Business Partner and Systems Engineer to develop a comprehensive design and implementation plan customized for the client's Wide Area Network.
D) Suggest that the client schedule a meeting with the Business Partner to evaluate the client's network and configuration needs.

5. IBM Security positions its products as being "ahead of the threat-How is this achieved?

A) By not relying on signature updates and utilizing heuristics.
B) By taking feeds from the global Managed Security Services operation and providing updates in real time.
C) By not disclosing vulnerabilities until a patch is available for products.
D) By relying on regular signature updates.

Solutions: