IBM C2150-609 問題集

質問 1：
During installation WebSEAL provides a default certificate key database that is used to authenticate both clients and junctioned servers.
Which stanza entry of the WebSEAL configuration file points to the default certificate key database (i.e. kdb file)?
A. webseal-cert-keyfile-label
B. webseal-cert-keyfile
C. ssl-keyfile
D. jct-cert-keyfile
正解：D

質問 2：
Which hypervisor supports hosting the IBM Security Access Manager (ISAM) 9.0 virtual appliance?
A. VMware ESX
B. RHEL Workstation
C. Hyper-V
D. QNX
正解：D

質問 3：
A deployment professional creates a support file on an IBM Security Access Manager V9.0 appliance.
What is its purpose?
A. To capture a snapshot of the appliance configuration
B. To re-image the appliance
C. For backup and recovery
D. To help troubleshoot problems with the appliance
正解：B

質問 4：
An older, software based deployment has several active Policy Servers set up behind a load-balancer. An IBM Security Access Manager V9.0 appliance cluster supports how many active Policy Servers?
A. 2
B. 3
C. 4
D. 1
正解：D

質問 5：
A customer has a developed an OAuth 2.0 Client application to access resources on behalf of a user. The customer states that the OAuth client has the following two constraints:
1. The OAuth client is not capable of maintaining its credentials confidential for authentication with the authorization server.
2. The resource owner does not have a trust relationship with the client What is the suitable OAuth 2.0 grant type for the API Protection Policy if the user resource accessed by the OAuth 2.0 client is to be protected by IBM Security Access Manager V9.0?
A. Implicit Grant
B. Authorization Code Grant
C. Client Credentials Grant
D. Resource Owner Password Credentials Grant
正解：C

質問 6：
Multiple users are complaining about being denied access to resources they believe they are entitled to see. The IBM Security Access Manager (ISAM) V9.0 deployment professional needs to understand and troubleshoot the various access control constructs in the ISAM protected object space. The deployment professional must also understand the order of evaluation of the three major access control constructs available in the Policy Administration tool.
What is the correct order of evaluation for these constructs?
A. AuthzRule -> ACL -> POP
B. POP -> AuthzRule -> ACL
C. ACL -> POP -> AuthzRule
D. ACL -> AuthzRule -> POP
正解：C

質問 7：
A company has deployed an IBM Security Access Manager V9.0 solution to protect web resources and now wants to secure access to enterprise resources from mobile devices.
The security deployment professional needs to run a utility to configure the existing WebSEAL with the instance of the appliance that provides the authorization server for Advanced Access Control.
Which utility tool will perform this configuration?
A. Middleware Configuration Utility
B. isamcfg
C. Web Administration Tool (WAT)
D. pdadmin
正解：B

質問 8：
A deployment professional attempts to log into an appliance which is part of a cluster to run pdadmin commands and receives the following message:
pdadmin> login -a sec_master -p password
2016-03-03-02:04:38.683-06:001------0x1354A420 pdadmin ERROR ivc socket mtsclient.cpp 2376
0x7fc2b7b0c720
HPDCO1056E Could not connect to the server 192.168.254.11, on port 7135.
Error: Could not connect to the server. (status 0x1354a426)
What should the deployment professional check concerning the login target?
A. Login was attempted on a restricted node
B. Login was attempted on a non-primary master of a cluster and the primary policy server is down
C. Login was attempted on a secondary master that has not been promoted to the primary
D. Login was attempted on a special node
正解：D