C2150-609

C2150-609 practice questions, page 4 of 6, with answer review and explanations.

Question 16

The IBM Security Access Manager (ISAM) V9.0 LMI SSL certificate is auto-generated by default. When the LMI certificate is due to expire, how is it renewed?

  1. The ISAM Appliance will renew LMI certificate automatically.
  2. The ISAM deployment professional must issue reset_lmi_cert using command line interface.
  3. The ISAM deployment professional must re-generate it using LMI Manage System Settings-> SSL panels.
  4. The ISAM deployment professional must create a new self sign certificate using LMI Manage System Settings-> SSL panels.

Question 17

The customer currently maintains all its users in Active Directory. As part of its new IBM Security Access Manager (ISAM) V9.0 deployment, the customer understands it will have to implement the ISAM "Global Sign-on (GSO)" to archive SSO with certain backend applications which do their own authentication and cannot be modified. Which federated repositories configuration will address the customer requirements?

  1. Use an external ISDS LDAP as the ISAM primary LDAP, federate with the AD and import all AD users into the ISAM TDS.
  2. Configure the AD as the ISAM Primary LDAP, which will create the necessary secauthority= default suffix. Import all users into the ISAM AD.
  3. Use the ISAM embedded LDAP as the Primary LDAP, federate with the AD and configure "basic user", and specify "basic-user-principal-attribute= samAccountName"
  4. Use an external ISDS LDAP as the Primary LDAP, federate with the AD, configure "basic user", specify "basic-user-principal-attribute= samAccountName" and "basic-user-suffix= secauthority=default".

Question 18

A customer has three LDAP servers: A master (ds1.example.com), another master (ds2.example com) and a read-only replica (ds3.example.com) used for the IBM Security Access Manager (ISAM) V9.0. The deployment professional has configured the ISAM runtime using ds1.example.com as the registration server. Which configuration will provide load balancing for LDAP read across all three servers and failover to ds2.example.com for LDAP write?

  1. replica= ds2.example.com, 389, readonly,5 replica= ds3.example.com, 389, readonly,5 replica= ds2.example.com, 389, readwrite,6
  2. replica= ds1.example.com, 389, readonly,6 replica= ds2.example.com, 389, readonly,6 replica= ds3.example.com, 389, readonly,6 replica= ds2.example.com, 389, readwrite,4
  3. replica= ds1.example.com, 389, readonly,4 replica= ds2.example.com, 389, readonly,4 replica= ds3.example.com, 389, readonly,4 replica= ds2.example.com, 389, readwrite,6
  4. replica= ds1.example.com, 389, readonly,1 replica= ds2.example.com, 389, readonly,2 replica= ds3.example.com, 389, readonly,3 replica= ds2.example.com, 389, readwrite,4

Question 19

Which web resource should be used to keep up to date on support flashes, fixpack announcements, and other product related issues?

  1. The IBM Support Portal
  2. The IBM Security twitter account
  3. The LinkedIn IBM Security Access Manager V9.0 Group
  4. The IBM devWorks IBM Security Access Manager V9.0 Forum

Question 20

A customer has deployed an IBM Security Access Manager V9.0 solution to protect web applications. After the initial authentication between the client and WebSEAL, WebSEAL can build a new Basic Authentication header and use the ""b option to provide the authenticated Security Access Manager user name (client's original identity) together with a predefined static password across the junction to the back-end server. Which configuration option will accomplish this?

  1. - gso
  2. ""b filter
  3. ""b ignore
  4. -supply