Free C2150-609 Exam Dumps Preview

An IBM Security Access Manager V9.0 deployment professional wants to be alerted by the appliance for
events like certificate expiry.

In which two ways can these alert notifications be configured? (Choose two.)

The request in a customer environment is IDP Initiated unsolicited SSO. The initial URL is:
https://POCIDP/FIM/sps/saml2idp/saml20/loginitial?
RequestBinding =HTTPPost&PartnerId= https://POCSP/isam/sps/abc/saml20&NameIdFormat=Email

The POCIDP is Point of Contact for Identity Provider and POCSP is Point of Contact for Service Provider.
The customer wants to configure TargetURL within the Service Provider Federation configuration in IBM Security Access Manager V9.0.

What will satisfy this requirement?

An IBM Security Access Manager (ISAM) V9.0 deployment professional wants to implement some changes to the ISAM object space in the production environment. Before applying the changes, the ISAM object space needs to be exported and saved.

How should the ISAM deployment professional do this export?

An IBM Security Access Manager V9.0 deployment professional is charged with monitoring request response times from WebSEAL to the backend. The deployment professional wants the flexibility to see response times per request, per junction, per HTTP return code, or other criteria that may come up in the future.

What action will generate the required data for this analysis?

A company is using the embedded LDAP server to store IBM Security Access Manager V9.0 user data.
However, there is a requirement to create another suffix to hold a set of user data.

Which two suffix elements are supported when creating a top level entry for the suffix? (Choose two.)

The customer directory environment includes two Active Directory (AD) Domain Controllers (DC) managing separate suffixes (one for corporate users, one for field offices), and one occurrence of Oracle Directory Server (ODS). The business requirement states the AD for corporate users in optional and the environment should remain available even if this DC is down. There are no duplicate users across these directories.

After configuring all directories in the Secure Web Settings -> Runtime Component -> Manage -> Federated Directories, how can this requirement be achieved?

A system is configured with two IBM Security Access Manager (ISAM) V9.0 reverse proxy servers behind a load balancer, and it is planned to use forms-based user authentication. It is a requirement that if a reverse proxy were to fail, users that were already logged in would not be required to log in again.

Which two configurations can the deployment professional use to achieve this? (Choose two.)

A deployment professional is configuring context based access for a protected resource junctioned by WebSEAL.

What must be explicitly set in order to invoke the runtime security services EAS to authorize a request?

In a customer environment, a REST API client is being developed to carry out Reverse Proxy configuration and maintenance. As part of one of the activities the customer needs to update the junction information with an additional Backend Server. The customer has written a REST API client but is not able to modify the junction.

Which HTTP headers should the customer pass?

An IBM Security Access Manager (ISAM) V9.0 customer is deploying a new WebSphere based Java application and wants to protect it via an ISAM Web Reverse Proxy. The user registries are not shared between ISAM and Websphere Application Server.

Which trust configuration can be used to achieve Single Sign On between ISAM Web Reverse Proxy and Websphere Application Server?

A deployment professional attempts to log into an appliance which is part of a cluster to run pdadmin commands and receives the following message:

pdadmin> login-a sec_master -p password
2016-03-03-02:04:38:.683-06:001 ---0x1354A420 pdadmin ERROR ivc socket mtsclient.cpp 2376
0x7fc2b7b0c720
HPDCO1056E Could not connect to the server 192.168.254.11, on port 7135.
Error: Could not connect to the server.

(status 0x1354a426) What should the deployment professional check concerning the login target?

An IBM Security Access Manager (ISAM) V9.0 environment is defined with multiple WebSEAL servers defined for high availability. They protect the same set of backend junctions.

Which parameter needs to be configured in each WebSEAL's configuration file to force all replicated WebSEAL servers to perform authorization checks against the same protected object space?

The IBM Security Access Manager (ISAM) V9.0 LMI SSL certificate is auto-generated by default.

When the LMI certificate is due to expire, how is it renewed?

A deployment specialist wants to use IBM Security Access Manager V9.0 to protect the back-end web applications from Cross Site Scripting attacks.

Which module will provide this protection?

Which web resource should be used to keep up to date on support flashes, fixpack announcements, and other product related issues?

An IBM Security Manager V9.0 deployment professional responsible for a large cluster notices the clocks among the nodes are not in sync and needs to update settings to ensure the clocks are synchronized.

Which setting should be used to help keep times synchronized?

A deployment professional creates a support file on an IBM Security Access Manager V9.0 appliance.

What is the purpose?

After a test cycle the deployment professional wants to search the WebSEAL WGA1 instance request log for HTTP 404 responses.

Where can this log be found in the Local Management Interface?

Which two features does the hardware appliance provide by default? (Choose two.)

An IBM Security Access Manager (ISAM) V9.0 environments is configured with Primary and Secondary Masters servers. The Primary master node becomes unavailable and ISAM deployment professional promotes the Secondary Master node to a Primary Master.

What happens to the original Primary Master when it becomes available and rejoins the network?

Which one is supported to externalize the Advanced Access Control runtime database?