IBM C2150-609 Exam Questions Instant Access

Question 1

A deployment professional needs to configure a JavaScript into an application before a user can access a resource protected by an IBM Security Access Manager V9.0 Advanced Access Control policy which calculates a Risk Score.

What is the name of this JavaScript?

Ainfo.js

Binit_acc.js

Csetup_riskscore.js

Ddynamic.attributes.js

Answer : A

Question 2

Due to regulatory statutes, the customer must limit a user to one session.

Which IBM Security Access Manager V9.0 capability is required to address this customer requirement?

AAuthorization Server

BAdvanced Access Control

CDistributed Session Cache

DSession Management Server

Answer : C

Question 3

A customer deployment consists of a large number of virtual host junction definitions. During a troubleshooting session the deployment professional realizes the WebSEAL logs do not distinguish between requests to different virtual hosts.

How can this be remediated?

ACustomize the message log to include the relative URL

BCustomize the request log to include the relative URL

CCustomize the message log to include the absolute URL

DCustomize the request log to include the absolute URL

Answer : B

Question 4

What feature or capability of IBM Security Access Manager V9.0 can be utilized for inserting a static (pre-defined) HTTP header tag/value pair into the request flowing from WebSEAL to the backend application?

AHTTP Transformation rule

BHTTP-Tag-Value extended attribute

CAuthzRule in LMI Policy Administration

D[header-names] stanza in WebSEAL conf file

Answer : C

Question 5

The request in a customer environment is IDP Initiated unsolicited SSO. The initial URL is:

https://POCIDP/FIM/sps/saml2idp/sam120/logininitial? RequestBinding=HTTPPost&Partnerld=https://POCSP/isam/sps/abc/saml20&NameIdFormat=email

The POCIDP is Point of Contact for Identity Provider and POCSP is Point of Contact for Service Provider. The customer wants to configure TargetURL within the Service Provide' Federation configuration in IBM Security Access Manager V9.0.

What will satisfy this requirement?

Apoc.signin.responseTargetURL

BTarget_URL in the mapping rule

CFederation Runtime property TargetURL

Ditfim_override_targeturl_attr in the mapping rule

Answer : C

Question 6

The IBM Security Access Manager (ISAM) V9.0 LMI SSL certificate is auto-generated by default.

When the LMI certificate is due to expire, how is it renewed?

AThe ISAM Appliance will renew LMI certificate automatically.

BThe ISAM deployment professional must issue reset_lmi_cert using command line interface

CThe ISAM deployment professional must re-generate it using LMI Manage System Settings -> SSL panels.

DThe ISAM deployment professional must create a new self sign certificate using LMI Manage System Settings -> SSL panels.

Answer : C

Question 7

The IBM Security Access Manager V9.0 deployment professional has recently discovered an entire deployment of over 100 junctions was performed incorrectly.

How can a repair operation be scripted for this, and future deployment personnel?

AUse the CLI SSH interface, navigating to isam->admin and authenticating as sec_master.

BUse a text editor and create the correct junction XML files, then import them using the LMI.

CUse the LMI Secure Web Settings -> Reverse Proxy -> Manage -> Junction Management interface.

DUse the REST API interface https://{appliance_hostname}/isam/pdadmin, JSON files and the CURL utility.

Answer : B

IBM Security Access Manager V9.0 Deployment C2150-609 Exam Questions