IBM 000-274 問題集

質問 1：
A solution implementer needs to immediately quiesce a DataPower appliance in the event of a power supply failure. How can the solution implementer satisfy this requirement?
A. Configure an EventSubscription for the power supply failure event to execute the "appliance-quiesce" command.
B. Configure an Event Filter for the power supply failure event to execute the "appliancequiesce" command.
C. Configure an Event Trigger for the power supply failure event to execute the "appliancequiesce" command.
D. Create a Scheduled Processing Rule that parses the system log to execute the SOMA request to quiesce the appliance.
正解：C

質問 2：
A solution implementer is debugging a web service proxy which communicates with a backend service http://server1:9092/myserv. The irregular performance to the backend service cannot be explained so a packet capture is run to dig deeper into the issue. The results need to be stored in a file called packet-capture. Also, the solution implementer wants to capture data only related to the specific backend service host and across all interfaces. What CLI syntax should the solution implementer use and how can the packet capture be analyzed?
A. packet-capture-advanced all temporary:///packet-capture -1 10000 9000 "host server1" and analyze the packet capture using the Troubleshooting section in the DataPower WebGUI.
B. packet-capture-advanced all temporary:///packet-capture -1 10000 9000 "host server1" and analyze using any 'pcap' compliant application, such as 'tcpdump' or 'Wireshark'.
C. packet-capture temporary:///packet-capture -1 10000 9000 "host server1" and analyze using any 'pcap' compliant application, such as 'tcpdump' or 'Wireshark'.
D. packet-capture temporary:///packet-capture -1 10000 9000 and analyze using any text editor or word processor
正解：B

質問 3：
A customer wants to protect communication between two WebSphere DataPower Appliances against a replay attack. The second DataPower appliance needs to validate that the message received from the first appliance has spent no more than 30 seconds in transit. How should the solution implementer satisfy this requirement?
A. Configure mutually authenticated SSL between the two DataPower appliances with an SSL timeout field configured to 30 seconds.
B. Use symmetric key encryption using an encrypt-string extension function on a timestamp string on the first DataPower appliance. Then use the same key with a decrypt-string extension function on the second appliance and validate the timestamp.
C. Set the var://service/transaction-timeout variable on the first DataPower appliance to30 seconds.
D. Use symmetric key encryption using an encrypt-string extension function on a timestamp string on the first DataPower appliance. Then use the public certificate from the first device with a decrypt-string extension function on the second appliance and validate the timestamp.
正解：B

質問 4：
A company is receiving digitally signed SOAP/HTTPS messages to process payment transactions from its business partner and verifies those messages using the Verify action.
There is also a requirement to use the signing certificate sent by the partner to encrypt the confidential response message from the company back to the partner. To satisfy this requirement, the solution implementer creates an Encrypt action with the 'Use Dynamically Configured Recipient Certificate' parameter to 'on'. Which statement related to the scenario above is false?
A. The encrypt action will use the certificate defined in the variable var://context/transaction/encrypting-cert to encrypt the message.
B. The public certificate used to encrypt the outgoing message will be automatically extracted from the incoming signed message while the signature is verified in the Verify action.
C. The certificate created in the 'Recipient Certificate' field takes precedence over the dynamic certificate inputoption.
D. The dynamic certificate used to encrypt the outgoing message can be user-defined using the syntax 'name:CertificateObjectName'
正解：C

質問 5：
A customer needs message privacy and message integrity on a given transaction, and prefers the use of WS-Policy. WebSphere DataPower must receive a username from each user, but no authentication is required. In order to implement this without additional custom work, the solution implementer can:
A. use an Encrypt and SignAction in the request, followed by a Decrypt and Verify Action in the response.
B. use WS-Policy with UsernameToken, Encryption and Signature enforced.
C. use a basic authentication header, then use the default encryption and signature inherent in the WS-Proxy.
D. use WS-Policy with Encryption, Signature and pass the username in the message body.
正解：B

質問 6：
A solution implementer creates a request to the XML Management Interface as shown in the following exhibit:

The XMLManagement Interface configuration on all appliances is configured with the property "SOAP Management URI" enabled. There may be other unsaved changes in this domain. Which of the following statements about the request are true? (choose 2)
A. The request will modify the logging target object's remote address property and set its other properties to their default values.
B. Only the remote address property of the logging target object will be modified.
C. Using a URI for the request of /service/mgmt/current will be successful.
D. Using no URIfor the request will be successful.
E. Only the logging target configuration will be saved.
正解：B,D

質問 7：
A solution implementer needs to configure the appliance to throttle transactions if the device memory utilization reaches 70%. What can the solution implementer do to achieve the desired result?
A. Configure Throttle Settings and set the Memory Throttle threshold to 30%.
B. Memory management is an internal DataPower function and cannot be configured.
C. Configure an SLM action to throttle transactions when memory reaches 70%.
D. Configure the Statistic Settings with load interval of 1 and memory threshold to 30%.
正解：A

質問 8：
The solution implementer needs to configure the DataPower appliance to restrict user account access to specific domains. The solution implementer implements this requirement by configuring the Domain Restriction section of the user account. During application execution, the configured user account is able to access a domain that is configured as restricted (no access allowed by this user). What should the solution implementer identify as a valid source of the problem?
A. The RBM system was not used to restrict access, which is the only way to meet the Domain Restriction requirement.
B. The user is a member of the 'root' user group.
C. An existing access policy or RBM policy can supersede the Domain Restriction list.
D. User access cannot be restricted to a specific domain in the user account configuration.
正解：C