IBM C2150-609 問題集

質問 1：
A large bank has multiple applications protected by two identically configured WebSEAL servers. One junction supports a reporting application that frequently experiences performance issues which slows response time. The worst case results in the entire site becoming unresponsive when all WebSEAL worker threads on all WebSEAL instances are consumed on the Junctions to this one reporting application.
Which configuration change will prevent this situation from occurring without impacting the behavior of any other application (junction), and keeping the entire site up?
A. Change worker-thread-hard-limit to 75 in WebSEAL configuration file on both WebSEAL servers.
B. Create a third WebSEAL instance supporting only this one reporting application and load balance requests across all three WebSEAL instances.
C. Use the -L 75 and -f options on the "pdadmin server task" command for the reporting application junction on both WebSEAL instances.
D. Use the "throttle" option on the "pdadmin server task" command for the reporting application junction on both WebSEAL instances.
正解：A

質問 2：
What are two key benefits of deploying IBM Security Access Manager V9.0? (Choose two.)
A. Secure user access to web and mobile applications
B. Enhanced user life-cycle management
C. Enhanced Session Recording features
D. Session Management Server module
E. Federated Single Sign On capabilities
正解：B,C

質問 3：
The deployed IBM Security Access Manager (ISAM) V9.0 solution in a company already contains a federated LDAP server. However, the dynamic group support is disabled. A deployment professional is required to change the existing federated LDAP server configuration to support the dynamic groups.
How should the deployment professional do this?
A. Manually modify the ldap.conf file and add 'dynamic-groups-enabled = yes'
B. Re-federate the LDAP server with dynamic group support enabled
C. Manually modify the activedir.conf file and add 'dynamic-groups-enabled = yes'
D. Edit the federated directory configuration using LMI method and select the checkbox
"Enable dynamic group"
正解：B

質問 4：
An IBM Security Access Manager V9.0 deployment professional responsible for a large cluster notices the clocks among the nodes are not in sync and needs to update settings to ensure the clocks are synchronized.
Which setting should be used to help keep times synchronized?
A. Set NTP settings using the LMI at the Date/Time panel
B. Set NTP settings in the components conf file
C. Set NTP settings using the LMI at the Advanced Tunings panel
D. Set NTP settings in /etc/ntp.conf
正解：A

質問 5：
Due to regulatory statutes, the customer must limit a user to one session.
Which IBM Security Access Manager V9.0 capability is required to address this customer requirement?
A. Authorization Server
B. Session Management Server
C. Advanced Access Control
D. Distributed Session Cache
正解：D

質問 6：
A stateful junction /WebApp is added to a Web reverse proxy instance with two backend HTTP servers. When one of the backend server stops responding to the requests, the users are getting the "Third Party Not Responding" error message even though one of the backend server continues to respond.
Which parameter needs to be added to the configuration file so that "Third Party Not Responding" error page is not rendered and the user is connected to the backend server that is responding?
A. failover-include-session-id = yes
B. use-same-session = yes
C. enable-failover-cookie-for-domain = yes
D. use-new-stateful-on-error = yes
正解：B

質問 7：
A company has deployed an IBM Security Access Manager V9.0 solution for protecting web resources and has enabled auditing for monitoring purposes. A security deployment professional has observed that audit records are using large quantities of disk space due to the large number of audit events related to HTTP access.
Which two strategies will help to reduce the volume of audit events in above scenario?
(Choose two.)
A. Generating selective audit records using authorization rules
B. Generate events for unsuccessful HTTP accesses only
C. Selectively disable the generation of events by using attached protected object policies (POPs)
D. Reconfigure WebSEAL to use CARS auditing, instead of native auditing
E. Generate audit records for specific groups only
正解：A,D

質問 8：
A deployment specialist wants to use IBM Security Access Manager V9.0 to protect the back-end web applications from Cross Site Scripting attacks.
Which rfeodule will provide this protection?
A. Federation Module
B. Advanced Access Control Module
C. Policy Server Module
D. Protocol Analysis Module
正解：D