C2150-609 Online Practice Questions and Answers

A request for a virtual host junction shows an unexpected source IP address.

Which troubleshooting tool can be used to investigate this issue?

A. Host File

B. Snapshots

C. Support Files

D. Packet Tracing

A deployment professional attempts to log into an appliance which is part of a cluster to run pdadmin commands and receives the following message:

pdadmin> login-a sec_master –p password 2016-03-03-02:04:38:.683-06:001 ---0x1354A420 pdadmin ERROR ivc socket mtsclient.cpp 2376 0x7fc2b7b0c720 HPDCO1056E Could not connect to the server 192.168.254.11, on port 7135. Error: Could not connect to the server. (status 0x1354a426)

What should the deployment professional check concerning the login target?

A. Login was attempted on a special node

B. Login was attempted on a restricted node

C. Login was attempted on a secondary master that has not been promoted to the primary

D. Login was attempted on a non-primary master of a cluster and the primary policy server is down.

A company has deployed an IBM Security Manager V9.0 solution to protect web resources and now wants to secure access to enterprise resources from mobile devices. The security deployment professional needs to run a utility to configure the existing WebSEAL with the instance of the appliance that provides the authorization server for Advanced Access Control.

Which utility tool will perform this configuration?

A. isamcfg

B. pdadmin

C. Web Administration Tool (WAT)

D. Middleware Configuration Utility

A company is upgrading its existing IBM Security Access Manager (ISAM) environment to ISAM 9.0. Based on the requirements for the upgrade, activation keys have been procured for different ISAM modules.

Which two features require an activation key? (Choose two.)

A. REST APIs

B. Web Reverse Proxy

C. Authorization Server

D. Local Management Interface

E. Distributed Session Cache

The IBM Security Manager V9.0 Advances Access Control module can perform Context-based Authorization based on the contents of a POST parameter.

Which two configuration steps need to be performed to do this? (Choose two.)

A. Attach an appropriate Access Control List to the required URL

B. Attach an appropriate Access Control Policy to the required URL

C. Attach an appropriate Protected Information Point to the required URL

D. Add an entry to the [user-agents] stanza in the reverse proxy configuration file

E. Add an entry to the [user-attribute-definitions] stanza in the reverse proxy configuration file

A company is planning to deploy an IBM Security Access Manager (ISAM) V9.0 cluster to provide high availability services to its customer. ISAM cluster members are separated by a firewall.

Which port(s) should be open in the firewall to assure normal cluster service functionality?

A. 21

B. 22

C. 2020

D. 2020 to 2050

The IBM Security Access Manager V9.0 system deployment professional is configuring context-based access to a protected resource, and has configured an Access Control Policy made up of four rules. The Precedence is set to First.

How are the four rules combined to produce an authorization decision?

A. Access is permitted or denied based on the outcome of first rule in the policy that can be evaluated against the access request. The order in which the rules are evaluated depends on the request payload.

B. Access is permitted or denied based on the outcome of first rule in the policy that can be evaluated against the access request. The rules in the policy are evaluated in the same order they are listed.

C. The rules are examined sequentially in the same order they are listed. If the first rule in the policy returns deny, the policy returns deny, and if any other rule in the policy returns permit, the policy returns permit.

D. All the rules are examined, and the order in which the rules are evaluated depends on the request payload. If the first rule in the policy returns deny, the policy returns deny, and if any other rule in the policy returns permit, the policy returns permit.

A customer is deploying an IBM Security Access Manager V9.0 solution to protect back end resources and is planning to use an LDAP Server that is set up to use SSL server authentication.

What is required to enable SSL to secure communications with LDAP?

A. LDAP server's private key

B. LDAP server's public key stash file

C. LDAP server's CA signer certificate

D. LDAP server's private and public key

A company wants to accelerate cloud adoption by integrating with popular public SaaS applications. The IBM Security Access Manager V9.0 deployment professional has determined there are Quick Connectors available for the chosen SaaS applications.

Which task does the deployment professional need to perform?

A. Develop custom mapping rules for the SaaS Application provider

B. Create the ServiceProvider (SP) Federation on the ISAM appliance

C. Synchronize users' enterprise credentials to the SaaS Application provider

D. Select a Partner Quick Connect partner template for the SaaS Application provider

What are two capabilities of Security Access Manager Platform of IBM Security Access Manager V9.0? (Choose two.)

A. Single Sign On

B. Identity mediation

C. Credential Lease Management

D. Session Recording and Playback

E. User Access Management of web, mobile and cloud applications