IBM C2150-197 Online Practice Questions and Exam Preparation

IBM C2150-197 Online Questions & Answers

• Question 51:

  A customer requires a certain attribute on a service to be empty in a target system managed by ISIM. One way to achieve this is to:

  A. Save a reconciliation schedule for the target system with the attribute filtered out. and always run the filtered reconciliation.
  B. Define the attribute value with provisioning policy entitlement parameter type null, with provisioning policy parameter enforcement as Mandatory.
  C. Define the attribute value with provisioning policy entitlement parameter type Constant, with value "null" (quotes included).
  D. Exclude the attribute from the account objectclass and remove attribute listing from the account form.
  D. Exclude the attribute from the account objectclass and remove attribute listing from the account form.

• Question 52:

  When planning an ISIM server upgrade, which two of the following processes are NOT preserved? (Choose two)

  A. Windows Active Directory Password Synchronization
  B. Self Service User Interface customization files
  C. Provisioning policy Add/Modify/Remove
  D. Certificate Authority certificates
  E. Identity Feeds
  C. Provisioning policy Add/Modify/Remove
  E. Identity Feeds

• Question 53:

  A user is a member of two ISIM groups. Each group is a member in two separate Access Control Items (ACIs), ACI1 and ACI2 on Static Organizational Roles. Each group also has a separate UI View associated with it, called View1 and View2.

  Which statement is correct in describing the access granted or denied to the user?

  A. The user will be able to create a static organizational role via the Java API if access to Create operation is granted in ACM and ACI2, and if View1 or View2 allow access to the Manage Roles task.
  B. The user will have access to create a static organizational role if its granted by ACI1 regardless of whether ACI2 grants, denies or provides none access to the Create operation.
  C. The user has a view of only the common tasks provided by both View1 and View2 in the ISIM Admin User Interface or ISIM Self Service User Interface.
  D. The user has a merged view of all the tasks provided by View1 and View2 in the ISIM Admin User Interface or ISIM Self Service User Interface,
  C. The user has a view of only the common tasks provided by both View1 and View2 in the ISIM Admin User Interface or ISIM Self Service User Interface.

• Question 54:

  Which of the following is a best practice high availability setup of LDAP for use with IBM Security Identity Manager?

  A. Two read/write master LDAPs with load balancer between them to distribute requests and I SIM configured to point at the load balancer
  B. Two read/write master LDAPs configured in fail over mode with load balancer and ISIM configured to point at the load balancer
  C. One master and one replica LDAP with ISIM configure to the master LDAP
  D. Separate read/write master LDAP for each node of an ISIM cluster
  D. Separate read/write master LDAP for each node of an ISIM cluster

• Question 55:

  The Recycle Bin has been activated, the Recycle Bin Age is set to 62 days, and the IdapClean script is set to run daily. When IdapClean completes, which statement is true?

  A. Some objects in the Directory Server's Recycle Bin may not be deleted even if age is greater than Recycle Bin Age Limit.
  B. All objects in the Directory Server's Recycle Bin will be deleted regardless of age greater than Recycle Bin Age Limit.
  C. All objects in the Directory Server's Recycle Bin will be deleted if their age is greater than Recycle Bin Age Limit.
  D. Objects in the Directory Server's Recycle Bin will be deleted if their age is less than Recycle Bin Age Limit.
  C. All objects in the Directory Server's Recycle Bin will be deleted if their age is greater than Recycle Bin Age Limit.

• Question 56:

  What does IdentityPolicy.getNextCount(baseld) in an identity policy return, where baseId is the value of the base user ID? (Choose two)

  A. It returns the iteration number that the identity policy is running to identify the number of times a user name had to be generated before a unique one could be found.
  B. It returns the next user ID that is generated according to the rules in the Identity policy but does not check for uniqueness.
  C. It returns a number that can be appended to the end of the user name to make that user name unique.
  D. It returns the number of conflicts the passed user name has against all services configured in ISIM.
  E. It returns-1 if the user name is already unique.
  C. It returns a number that can be appended to the end of the user name to make that user name unique.
  D. It returns the number of conflicts the passed user name has against all services configured in ISIM.

• Question 57:

  Which of the following is a component located in the compressed adapter file?

  A. Service Definition File
  B. Language Packs
  C. Timx_agents.zip
  D. app_ejb.jar
  B. Language Packs

• Question 58:

  When you create a custom Person or BPPerson type entity, how is the actual LDAP class that stores the entity created?

  A. IBM Security Systems Identity Manager will recognize the new attributes from data feed and create the objectclass automatically.
  B. Custom LDAP classes and their attributes must be created directly within your LDAP data repository.
  C. Use the IdapConfig tool provided by IBM Security Systems Identity Manager to create the objectclass.
  D. Modify the person form and specify the attributes to include for the new entity.
  B. Custom LDAP classes and their attributes must be created directly within your LDAP data repository.

• Question 59:

  An adapter is a software component that provides an interface between a managed resource and IBM Security Identity Manager. Which two statements are true? (Choose two)

  A. An agent less adapter can be on a remote system from the managed system, in order to administer accounts.
  B. An agent-based adapter must be on the managed resource, in order to administer accounts.
  C. All adapters provided by IBM are implemented using IBM Directory Integrator technology.
  D. IBM provides Adapters for all managed systems and all can be customized.
  E. Custom adapters are required to go through a stringent review process.
  A. An agent less adapter can be on a remote system from the managed system, in order to administer accounts.
  B. An agent-based adapter must be on the managed resource, in order to administer accounts.

• Question 60:

  Your customer has requested identity management on a system where no local adapter is available. Developing a new adapter is not feasible, since the system does not document a programmatic means for provisioning.

  What customization can be used to handle this requirement?

  A. Define a manual service to handle the provisioning in a custom work flow with instructions, notification, and confirmation.
  B. Use a custom life cycle rule to generate tickets into an external service management application.
  C. Define a manual provisioning policy with entitlements that may be invoked on this service.
  D. It is not possible to define a service when you cannot build the adapter.
  C. Define a manual provisioning policy with entitlements that may be invoked on this service.