C2150-609 Exam Training Practice Tests (IBM Security Access Manager V9.0 Deployment)]

Question 1

An Access Manager environment utilizing failover cookies was recently upgraded from TAM 6.1.1 to IBM Security Access Manager (ISAM) V9.0. The deployment professional wants to take advantage of the Distributed Session Cache.
What are two advantages of the DSC verses failover cookies? (Choose two.)

A. Central administration of sessions B. Additional session cookie increasing security C. Extra attributes passed in the session cookie D. Concurrent session policy enforcement E. Utilizes SHA2 encryption keys

Correct Answer: D,E

Question 2

An IBM Security Access Manager (ISAM) V9.0 deployment professional wants to implement some changes to the ISAM object space in the production environment. Before applying the changes, the ISAM object space needs to be exported and saved.
How should the ISAM deployment professional do this export?

A. Use the REST API B. Use the pdadmin command C. Use the LMI export panel D. Use the Policy Administration (WPM)

Correct Answer: D

Question 3

What are two capabilities of Security Access Manager Platform of IBM Security Access Manager V9.0? (Choose two.)

A. Identity mediation B. Single Sign On C. Credential Lease Management D. Session Recording and Playback E. User Access Management of web, mobile and cloud applications

Correct Answer: B,E

Question 4

A customer's IBM Security Access Manager (ISAM) V9.0 environment consists of the appliance embedded LDAP as the Primary LDAP, and a federated Active Directory (AD) which contains all user/group information. The embedded LDAP will only contain information about default ISAM components and a limited number of AD groups. Users will be required to change their own passwords via ISAM.
Which Idap.conf configuration will properly configure the AD into this Federation and meet all customer requirements?

A. basic-user-support = no
host = test-root.acme.com port = 389
bind-dn = CN=sys_isamadm1OU=SvcAccts,DC=test,DC=acme,DC=com ssl-enabled = no suffix = dc=test-root,dc=com basic-user-principal-attribute = samAccountName bind-pwd
"obfuscated** B. basic-user-support = yes host = test-root.acme.com port = 636
bind-dn = CN=sysjsamadm,OU=SvcAccts,DC=test,DC=acme,DC=com ssl-enabled = yes suffix = dc=test-root,dc=com C. basic-user-support = no
host = test-rootacme.com ,
port = 636
bind-dn = CN=sysjsamadm(OU=SvcAccts.DC=test,DC=acme,DC=com
ssl-enabled = yes
suffix = dc=test-root,dc=com
basic-user-principal-attribute = samAccountName
bind-pwd = **obfuscated** D. basic-user-support = yes
host = test-root.acme.com
port = 389
bind-dn = CN=sysjsamadm,OU=SvcAccts.DC=test,DC=acme,DC=com
ssl-enabled = no
suffix = dc=test-root,dc=com
basic-user-principal-attribute = samAccountName
bind-pwd = **obfuscated**
basic-user-principal-attribute = samAccountNarrae bind-pwd = "obfuscated**

Correct Answer: C

Question 5

An IBM Security Access Manager V9.0 deployment professional needs to create the HTTP- Tag-Value attribute to pass values to a backend server as headers.
How can this be done?

A. By creating an AuthzRule which pulls the header from the ADI B. By creating an extended attribute on a POP protecting the junction C. By creating an extended attribute on the junction protected object D. By creating an HTTP rule which is attached to the ACL

Correct Answer: B

Question 6

A deployment professional creates a support file on an IBM Security Access Manager V9.0 appliance.
What is its purpose?

A. To re-image the appliance B. For backup and recovery C. To help troubleshoot problems with the appliance D. To capture a snapshot of the appliance configuration

Correct Answer: A

Question 7

Users are experiencing authentication failures. They are opening a large number of Help Desk tickets.
Which message severity level should a deployment professional be looking for in the message log?

A. Error message B. Warning message C. Fatal message D. Notice message

Correct Answer: C

Question 8

A customer requirement stipulates the use of a second factor authentication to access certain resources.
Which two policy constructs can be used to implement two-factor authentication using IBM Security Access Manager V9.0 Advanced Access Control? (Choose two.)

A. Permit with Authentication B. Permit C. Deny with Obligation DC. Permit with Obligation D. Permit with Risk Based Access

Correct Answer: A,D

Question 9

What out-of-the-box feature of IBM Security Access Manager (ISAM) V9.0 enables invalidating a defined collection of back-end server generated HTTP cookies when the user logs off WebSEAL?

A. cookie jar B. logout-remove-cookie attribute in webseal.conf C. -k option on junction create command (server task create) D. /pkmslogout

Correct Answer: B

Question 10

The IBM Security Access Manager (ISAM) V9.0 deployment professional is setting up a new junction. The back-end junctioned server listens on port 443 (SSL), but does not require mutual certificate authentication.
Which keystore does the deployment professional need to update?

A. The back-end signer certificate needs to be imported into the "lmi_trust_store" keystore on the ISAM appliance. B. The WebSEAL signer certificate needs to be imported into the keystore used by the back-end server. C. The back-end signer certificate needs to be imported into the WebSEAL keystore on the ISAM appliance. D. The WebSEAL Test-Only certificate needs to be imported in the keystore used by the back-end server.

Correct Answer: C

IBM Security Access Manager V9.0 Deployment - C2150-609 Exam Practice Test