01. Following a firmware apply, an administrator needs the running DataPower services to restart so the new level takes effect, but wants to avoid a full hardware-level restart of the appliance if the lesser action is sufficient.
Which choice best reflects the correct distinction and the least-disruptive correct action here?
a) Perform a full hardware reboot of the appliance, since only a complete power-cycle restart can ever bring the DataPower processes back up at the newly applied firmware level
b) Perform a reload, which restarts the DataPower processes and domains without a full appliance reboot
c) Reinitialize the appliance, because that is the standard way to activate new firmware
d) Quiesce the appliance indefinitely, since draining traffic restarts the services on its own
02. On a DataPower Gateway, an administrator wants several services to share one logical address that can be moved between physical Ethernet interfaces without reconfiguring each service.
Which network configuration object is designed to provide a named local address that is decoupled from a specific physical interface?
a) A host alias that maps a name to a local address independent of any one interface
b) A DNS static host entry that resolves a hostname to a remote IP address
c) An Ethernet interface IP address assigned directly to a physical port, which services can then share across interfaces without reconfiguration
d) A static route that directs traffic for a destination subnet through a gateway
03. During an incident, an administrator needs to quickly isolate only the serious failures from a busy system log that is dominated by routine informational entries.
What is the most effective way to focus on the relevant entries while inspecting the log?
a) Lower the appliance's overall logging level so that informational events stop being generated entirely
b) Reboot the appliance so that the system log is cleared and only newly produced failures appear
c) Filter the log view by event priority so only the higher-severity entries are displayed
d) Delete the informational entries from the system log so that only the failure entries remain visible
04. In a standby high-availability pair, clients report that the shared service address stopped responding after the active appliance was taken offline for maintenance. The administrator checks the standby member and finds its facing interface link state is down, while the other members' configuration appears identical.
Which conclusion most accurately explains why takeover of the virtual IP did not restore service?
a) The standby could not assume the virtual IP because its own facing interface had no working link
b) The virtual IP can only ever live on the original active appliance and cannot move
c) Identical configuration on both members guarantees takeover, so the problem must be a client DNS cache
d) A missing host alias on the standby blocked it from owning the shared address
05. An administrator is configuring Role-Based Management (RBM) so that authenticated administrators receive the command, domain, and resource access appropriate to their job.
Within RBM configuration, what is the role of the access profile that an administrator is mapped to?
a) It stores the administrator's password so that authentication can succeed without a separate source
b) It defines the set of permissions that determine which commands, domains, and resources the mapped administrator may use
c) It selects the management interface, such as WebGUI or CLI, that the administrator is allowed to open
d) It lists the client IP addresses and subnets that are permitted to reach the management service, so an RBM access profile effectively acts as a network access control list for the appliance
06. Two DataPower appliances are configured into a high-availability arrangement so that clients connect to a single address that one appliance owns at a time, and the other takes over if the active one fails.
Which statement best describes how this standby high-availability mechanism works?
a) A virtual IP is owned by one appliance, and a VRRP-style standby promotes a peer on failure
b) Both appliances answer the same shared address simultaneously so the standby model load-balances incoming traffic evenly across the pair
c) An external load balancer is mandatory because the appliances cannot fail over themselves
d) Each appliance keeps its own address and a client-side DNS round robin spreads traffic
07. To harden management access on a production appliance, an administrator wants to ensure that if the remote authentication source for RBM becomes unreachable, recovery access is still possible but is not left as a broad standing privilege.
Which approach best balances continued recovery access with hardened privilege exposure?
a) Disable RBM entirely so the management interface always remains reachable
b) Rely on an ACL allow entry for the operations subnet to automatically grant administrative access whenever the remote authentication source happens to be down
c) Grant every administrator a permanent local account with full privileges as a backup
d) Keep a tightly scoped local fallback user available only when the remote source cannot authenticate
08. IBM support requests a comprehensive snapshot of the appliance's internal state and logs to investigate a difficult intermittent failure that the administrator cannot reproduce on demand.
What should the administrator generate and provide?
a) A packet capture, which records the failure traffic as the support diagnostic of record
b) An error report, which bundles appliance state and logs into a single diagnostic package for support
c) A secure backup, which produces an encrypted copy of configuration and keys for support analysis
d) A configuration export, which packages the appliance objects and services for support to inspect state
09. After uploading a new firmware image, an administrator wants to confirm it can actually be applied to this appliance before scheduling the change.
Which consideration is most important when determining whether the uploaded image can be applied?
a) Whether the image file was placed in the temporary scratch directory
b) Whether a configuration export of the running domain was taken in the very same console session that uploaded the firmware image to the image directory
c) Whether the appliance has been quiesced for at least one full day first
d) Whether the appliance meets the licensing and compatibility requirements for that image
10. While configuring mutual TLS for a service, an administrator must specify both the certificate and key the gateway presents to identify itself and the set of certificates it trusts when verifying the peer.
Which pairing of crypto objects correctly fulfills these two distinct roles?
a) An identification credential to present the gateway's own certificate and key, and a validation credential to verify the peer
b) A validation credential to present the gateway's own certificate, and an identification credential to verify the peer
c) A crypto key alone to present identity, and a crypto certificate alone to verify the peer
d) A crypto profile to present the gateway's own certificate and key, and an ACL allow list of trusted peer addresses to verify the remote peer's identity during the handshake