CA CA Certifications CAT-140 Questions & Answers

• Question 21:

  If your environment has four Policy Servers, how many shouID have Agent Key Generation enabled?

  A. 1

  B. 2

  C. 3

  D. 4

  Correct Answer: A

• Question 22:

  What is the purpose of IP checking?

  A. It enables you to use persistent cookies.

  B. It prevents unauthorized IP addresses from gaining access.

  C. It enables you to use single sign-on (SSO) for multiple browser settings.

  D. It enables you to start a new browser setting and still have the SSO capability.

  Correct Answer: B

• Question 23:

  What does the AllowCacheHeaders parameter remove?

  A. Proxy data

  B. Session data

  C. Expiration of session parameters

  D. Headers from requests for protected resources

  Correct Answer: D

• Question 24:

  User attribute mapping enables you to:

  A. map policies to different user attributes.

  B. map user groups to different administrator groups.

  C. map user classes to different user attribute names.

  D. map one common name to different user attribute names in different user directories.

  Correct Answer: D

• Question 25:

  Which statement about the Credential Selector is TRUE?

  A. It eliminates the need for password policies to manage password rules.

  B. It is an add-on that cannot be used with all CA SiteMinder-protected applications.

  C. It is implemented as a stand-alone component for any CA SiteMinder-protected application.

  D. It chooses credential authentication schemes dynamically based on the type of resource being requested.

  Correct Answer: C

• Question 26:

  By default, CA SiteMinder session cookies:

  A. are transient.

  B. are persistent.

  C. are stored on a web server.

  D. are not associated with any particular domain.

  Correct Answer: A

• Question 27:

  In your company, authentication information is stored in a central Oracle repository. However, authorization information is spread across several different SQL Server and Oracle user directories associated with specific applications. The Social Security Number (SSN) of employees is common to all user directories. You are likely to use Lightweight Directory Access Protocol (IDAP) directories in the near future. Which statement about CA SiteMinder directory mapping options is TRUE?

  A. It is best to use the identical DN method to mapIDAP directories to the central Oracle repository.

  B. When mapping relational database directories to each other, Universal ID is the only method available.

  C. When mappingIDAP user directories to the central Oracle repository, Universal ID is the only method available.

  D. You can choose between the Universal ID and Identical DN methods when mapping relational databases with the central Oracle repository for authentication.

  Correct Answer: C

• Question 28:

  What is the effect of setting only the PersistentCookies parameter to Yes?

  A. All cookies will be persistent.

  B. TransientIDCookies are set to No.

  C. SMSESSION cookies will be persistent.

  D. SMIDENTITY cookies will be persistent.

  Correct Answer: C

• Question 29:

  Which statement about the CA SiteMinder Extensible Policy Store (XPS) is TRUE?

  A. It exports to .dtd files.

  B. It cannot co-exist with legacy policy stores.

  C. New applications can be added without altering the schema.

  D. It uses the new CA SiteMinder Data Interchange Format (SMDIF).

  Correct Answer: C

• Question 30:

  A benefit of the Credential Selector is that it enables:

  A. users to choose different types of authentication credentials

  B. temporary credentials to be assigned to users who log on anonymously

  C. CA SiteMinder to authenticate users against one directory and authorize users against a separate directory

  D. the Web Agent to compare the IP address stored in a cookie from the last request with the IP address in the current request to see if theymatch

  Correct Answer: A