C2150-609

C2150-609 practice questions, page 3 of 6, with answer review and explanations.

Question 11

A customer received a replacement hardware appliance, but on boot up it has a different firmware than that for IBM Security Access Manager (ISAM) V9.0. The appliance needs to be flashed to ISAM V9.0. The appliance needs to be rebooted with a bootable USB drive formatted as FAT32. Which file format is needed to create the bootable drive?

  1. .iso
  2. .ova
  3. .pkg
  4. .img

Question 12

A risk officer of an organization discovered that a site protected by the IBM Security Access Manager V9.0 solution might be vulnerable to common attacks like cross-site scripting (XSS) and SQL injection. Which optional component should be configured to protect against these attacks?

  1. Federation
  2. Secure Web Settings
  3. Advanced Access Control
  4. Web Application Firewall

Question 13

A stateful junction /WebApp is added to a Web reverse proxy instance with two backend HTTP servers. When one of the backend server stops responding to the requests, the users are getting the "Third Party Not Responding" error message even though one of the backend server continues to respond. Which parameter needs to be added to the configuration file so that "Third Party Not Responding" error page is not rendered and the user is connected to the backend server that is responding?

  1. Use-same-session = yes
  2. Use-new-stateful-on-error=yes
  3. Failover-include-session-id= yes
  4. Enable-failover-cookie-for-domain = yes

Question 14

An IBM Security Manager V9.0 deployment professional executes the following steps: 1. Navigate to Edit SSL Certificate Database-embedded_ldap_keys 2. Select the embedded LDAP server certificate 3. Click Manage->Export 4. Save the resulting .cer file onto local desktop Which task was the deployment professional performing?

  1. Renewing the embedded LDAP server certificate
  2. Replacing the embedded LDAP server certificate
  3. Creating a backup of the embedded LDAP server certificate
  4. Preparing to configure SSL for a local LDAP client to the embedded LDAP server

Question 15

An IBM Security Access Manager V9.0 systems deployment professional needs to protect a back-end web applications from SQL injection attacks that match signatures from the IBM X-Force signature database. Which action needs to be performed?

  1. Simulation Mode must be enabled and a Risk Profile must be specified.
  2. Web Content Protection must be enabled and a Risk Profile must be specified.
  3. Simulation Mode must be enabled and a Registered Resource must be specified.
  4. Web Content Protection must be enabled and a Registered Resource must be specified.