RSA 050-V71x-CSESECURID 問題集

質問 1：
If the ACME Company has a disaster recovery facility for their information systems, which statement best describes the installation strategy for Primary and Replica RSA Authentication Manager instances?
A. A Primary and Replica Instance should both be located in the headquarters facility; a RADIUS server should be instal ed at the disaster recovery facility for alternative authentication.
B. The Primary Instance should be located at the disaster recovery facility; a Replica instance should be installed in the headquarters facility for easy access by Administrators.
C. The Primary Instance should be located in the headquarters facility for easy access by Administrators; a Replica Instance should be installed at the disaster recovery facility.
D. The Primary Instance should be located at the headquarters facility and configured only for Online Authentication; a Replica Instance should be installed at the disaster recovery facility and configured only for Offline Authentication
正解：C

質問 2：
Which of the following is NOT a component of the technology used within an RSA SecurID token?
A. algorithm
B. private key
C. seed record
D. time source
正解：B

質問 3：
When considering a failover LDAP directory server for an Identity Source,
A. two identical Identity Sources must exist in Authentication Manager ?one each for the primary and failover directories.
B. two identical Realms must exist in Authentication Manager ?one each for the primary and failover directories.
C. the structure of the designated failover directory must be identical to the primary directory.
D. The structure of the designated failover directory must have Organizational Unit names that are different than the primary directory OUs
正解：C

質問 4：
A user can not successfully authenticate using a local Agent installed on their Windows Workstation. Log entries indicate a "Node secret mismatch". What actions will re- establish a node secret match? (Choose two)
A. A Windows Administrator sets the node secret value to "null' in the domain "Users and Computers" management console.
B. A Windows Administrator clears the node secret through the RSA Security Center console.
C. The user clears the node secret through the RSA Authentication Agent test utility.
D. An Authentication Manager administrator clears the node secret through the Security Console Authentication Agent > Manage Node Secret screen.
E. An Authentication Manager administrator purges the Offline Authentication
"Dayfiles" from the user's workstation.
F. The user enters their RSA SecurID tokencode without a PIN to trigger a "Node Secret Sent" response from Authentication Manager.
正解：B,D

質問 5：
If a user is issued an RSA SecurID SID800 token ("USB token"), the user must log in using a computer with a USB 2.0 port and the SID800 token must be plugged in to that port.
A. False
B. True
正解：A

質問 6：
If the RSA Authentication Manager Server does not recognize the source IP address in an authentication request packet from an Agent,
A. it will assign the source IP address to the Agent if "Auto-Resolve" is set in the Agent record.
B. it will request a second tokencode be entered by the user.
C. it will search DNS to resolve the address by Agent hostname.
D. it will ignore or reject the packet.
正解：D

質問 7：
Which are pre-defined administrative roles in RSA Authentication Manager? (Choose three)
A. Site Administrator
B. User Administrator
C. Help Desk Administrator
D. Identity Source Administrator
E. Realm Administrator
F. RADIUS Administrator
正解：B,C,E