IBM C2150-609 Exam Questions Instant Access

Question 1

The IBM Security Access Manager V9.0 Advanced Access Control module can perform Context-Based Authorization based on the contents of a POST parameter.

Which two configuration steps need to be performed to do this? (Choose two.)

AAttach an appropriate Access Control List to the required URL

BAttach an appropriate Access Control Policy to the required URL

CAttach an appropriate Protected Information Point to the required URL

DAdd an entry to the [user-agents) stanza in the reverse proxy configuration file.

EAdd an entry to the [user-attribute-definitions] stanza in the reverse proxy configuration file

Answer : D, E

Question 2

What feature or capability of IBM Security Access Manager V9.0 can be utilized for inserting a static (pre-defined) HTTP header tag/value pair into the request flowing from WebSEAL to the backend application?

AHTTP Transformation rule

BHTTP-Tag-Value extended attribute

CAuthzRule in LMI Policy Administration

D[header-names] stanza in WebSEAL conf file

Answer : C

Question 3

Which hardware component is included in an IBM Security Access Manager V9.0 hardware appliance?

AUPS

BIPMI port

CLCD Panel

DInfiniBand port

Answer : C

Question 4

An IBM Security Access Manager V9.0 Reverse Proxy has a stateful junction to a Portal application called ''/wps''. There is no web server in front of Portal. This junction has three Portal servers defined behind it. The Portal team needs to do maintenance on each of the three servers. The team wants to accomplish this with least impact to end users.

Which pdadmin "server task" based steps will accomplish this?

AStop a server, have Portal team apply maintenance, bring server online - repeat for the other two servers

BDelete a server, have Portal team apply maintenance then add server back - repeat for the other two servers

CTake a server offline, have Portal team apply maintenance, bring server online - repeat for the other two servers

DThrottle a server, ensure activity has ceased for that server, have Portal team apply maintenance, bring server online - repeat for the other two servers

Answer : C

Question 5

A customer has a developed an OAuth 2.0 Client application to access resources on behalf of a user. The customer states that the OAuth client has the following two constraints:

1. The OAuth client is not capable of maintaining its credentials confidential for authentication with the authorization server.

2. The resource owner does not have a trust relationship with the client

What is the suitable OAuth 2.0 grant type for the API Protection Policy if the user resource accessed by the OAuth 2.0 client is to be protected by IBM Security Access Manager V9.0?

AImplicit Grant

BClient Credentials Grant

CAuthorization Code Grant

DResource Owner Password Credentials Grant

Answer : B

Question 6

A company has deployed an IBM Security Access Manager V9.0 solution to protect web resources and now wants to secure access to enterprise resources from mobile devices. The security deployment professional needs to run a utility to configure the existing WebSEAL with the instance of the appliance that provides the authorization server for Advanced Access Control.

Which utility tool will perform this configuration?

Aisamcfg

Bpdadmin

CWeb Administration Tool (WAT)

DMiddleware Configuration Utility

Answer : A

Question 7

In an organization's testing environment, the IBM Security Access Manager V9.0 deployment professional is required to deploy the virtual appliance on Amazon EC2 with a single reverse proxy instance with a single network interface.

How should the deployment professional configure the reverse proxy so that end-users can access the reverse proxy without specifying a non-standard port (other than 80 and 443)?

AUse port forwarding to map non-standard port to a standard port on appliance using LMI

BUse port forwarding to map non-standard port to a standard port on appliance using CLI

CConfigure appliance management port to listen on non-standard port and set reverse proxy port to listen on standard port using LMI

DConfigure appliance management port to listen on non-standard port and set reverse proxy port to listen on standard port using CLI

Answer : A

IBM Security Access Manager V9.0 Deployment C2150-609 Exam Questions