Sample Questions for Exam S2000-021

IBM Cloud Pak for Security V1.10 Administrator Specialty

Please note: These questions were developed at the same time and by the
same IBM Cloud Pak for Security subject matter experts as the real exam
questions. While these sample questions will give you a good idea of the
nature of the questions on the real exam, this is not a thorough
representation of the material covered by the real exam, so success with
these sample questions should not be considered predictive of success on
the real exam.

Section 1: Architecture

1. What is the minimum number of nodes that must be provisioned for

a Cloud Pak for Security cluster that is deployed on AWS?
A. 3
B. 4
C. 7
D. 9

2. A Cloud Pak for Security admin wants to make permanent storage

available to a pod.

What Red Hat OpenShift asset must be created to support this?

A. Storage Node
B. Default Storage Class
C. Block Storage Operator
D. Persistent Volume Claim

3. For which data source does Cloud Pak for Security Universal Data
Insights provide built-in support?
A. HCL BigFix
B. SentinelOne
C. Windows Defender
D. IBM Security Guardium Data Encryption
4. Which Cloud Pak foundational services Administration panel card
does an admin use to view the number of pods that are currently
running?
A. Cluster inventory
B. Storage summary
C. Workload summary
D. System storage status

5. From which Cloud Pak for Security component does the Risk
Scoring Engine use input?
A. Gateway App Host
B. Universal Auditing Engine
C. Threat Intelligence Insights
D. Connected Assets and Risk

Section 2: Administation
6. Which of these accounts can add new users to Cloud Pak for
Security?
A. Standard user
B. Super admin user
C. Provider account admin
D. Account manager admin

7. Which type of license avoids unexpected data costs and is based

on the size and type of data sources being secured?
A. Seat-based
B. Usage-based
C. Enterprise-wide
D. Organization-wide

8. Which data asset is used by Threat Intelligence Insights for the X-

Force threat score?
A. Credibility
B. Magnitude
C. Relevance
D. Threat severity
9. What must be deployed to host the containers that are required for
communication between data sources and Cloud Pak for Security?
A. Control Node
B. Data Gateway
C. Compute Node
D. Edge Gateway App Host

10. Which widget chart type can you add to a Cloud Pak for Security
dashboard to present your data in a way that is meaningful for your
organization?
A. Bar chart
B. Location chart
C. Organization chart
D. Small number chart

Section 3: Operations
11. All techniques or tactics whose number is ≥ 66% of the maximum
technique number are mapped to which color in the MITRE heat map?
A. Red
B. Dark
C. Darkest
D. Lightest

Section 4: Troubleshooting
12. To gather information regarding what resources are being used,
the Cluster Utilization page in Red Hat OpenShift can provide
information for this case.

Which resource information is included in this page?

A. Disk IOPS
B. Resource capacity
C. Deployment states
D. Persistent volume claims
Answer key

1. C
2. D
3. A
4. A
5. D
6. C
7. C
8. D
9. D
10. A
11. C
12. B