Skip to main content

C2150-609 Real Exam Questions

IBM Security Access Manager V9.0 Deployment

138 questions available · Page 1 of 14

Updated Exam DumpsVerified AnswersPass Guarantee

Get Complete Exam Dumps
Question 1 Single choice

An IBM Security Access Manager V9.0 systems deployment professional needs to protect a back-end web applications from SQL injection attacks that match signatures from the IBM X-Force signature database.

Which action needs to be performed?

  1. A

    Simulation Mode must be enabled and a Risk Profile must be specified.

  2. B

    Web Content Protection must be enabled and a Risk Profile must be specified.

  3. C

    Simulation Mode must be enabled and a Registered Resource must be specified.

  4. D

    Web Content Protection must be enabled and a Registered Resource must be specified.

Show answer and explanation

Correct answer: A

Question 2 Single choice

In an organization's testing environment, the IBM Security Access Manager V9.0 deployment professional is required to deploy the virtual appliance on Amazon EC2 with a single reverse proxy instance with a single network interface.

How should the deployment professional configure the reverse proxy so that end-users can access the reverse proxy without specifying a non-standard port (other than 80 and 443)?

  1. A

    Use port forwarding to map non-standard port to a standard port on appliance using LMI

  2. B

    Use port forwarding to map non-standard port to a standard port on appliance using CLI

  3. C

    Configure appliance management port to listen on non-standard port and set reverse proxy port to listen on standard port using LMI

  4. D

    Configure appliance management port to listen on non-standard port and set reverse proxy port to listen on standard port using CLI

Show answer and explanation

Correct answer: C

Question 3 Single choice

An IBM Security Access Manager (ISAM) V9.0 environment is defined with multiple WebSEAL servers defined for high availability. They protect the same set of backend junctions.

Which parameter needs to be configured in each WebSEAL's configuration file to force all replicated WebSEAL servers to perform authorization checks against the same protected object space?

  1. A

    host-name

  2. B

    server-name

  3. C

    domain-name

  4. D

    virtual-host-name

Show answer and explanation

Correct answer: B

Explanation

References:
https://www.ibm.com/support/knowledgecenter/en/SSPREK_9.0.0/com.ibm.isam.doc/wrp_config/concept/con_constnt_config_ws_rplca_srvr.html

Question 4 Single choice

The deployment professional (testuser1) is currently logged into the appliance, but cannot read the IBM Security Access Manager (ISAM) V9.0 event logs. Management authorization is configured as shown in the following screenshot.

What is the most likely cause of this issue?

  1. A

    Write permission is required for the Event Log Feature.

  2. B

    The Global Administrator role lacks the necessary privileges.

  3. C

    Userid "testuser1" has not been added to the ISAMAdmins LDAP group.

  4. D

    There is a connectivity issue and the LDAP containing userid "testuser1" cannot be contacted.

Show answer and explanation

Correct answer: A

Question 5 Single choice

A company wants to accelerate cloud adoption by integrating with popular public SaaS applications. The IBM Security Access Manager V9.0 deployment professional has determined there are Quick Connectors available for the chosen SaaS applications.

Which task does the deployment professional need to perform?

  1. A

    Develop custom mapping rules for the SaaS Application provider

  2. B

    Create the ServiceProvider (SP) Federation on the ISAM appliance

  3. C

    Synchronize users' enterprise credentials to the SaaS Application provider

  4. D

    Select a Partner Quick Connect partner template for the SaaS Application provider

Show answer and explanation

Correct answer: D

Question 6 Multiple choice

Which two protocols does the federation module in IBM Security Access Manager V9.0 support? (Choose two.)

  1. A

    SAML 2.0

  2. B

    XACML 3.0

  3. C

    Higgins 2.0.0

  4. D

    OpenID Connect

  5. E

    Shibboleth (Internet 2)

Show answer and explanation

Correct answers: A, D

Explanation

References:
https://www-01.ibm.com/support/docview.wss?uid=swg27047422&aid=8

Question 7 Multiple choice

There is an SSL connectivity issue between the IBM Security Access Manager V9.0 Reverse Proxy and the backend business application.

Which Two troubleshooting commands under Tools in the application SSH interface can be used to validate the Reverse Proxy can successfully connect to the backend host: secure-port? (Choose two.)

  1. A

    Ping

  2. B

    Session

  3. C

    Connect

  4. D

    Traceout

  5. E

    Connections

Show answer and explanation

Correct answers: B, C

Explanation

References:
https://www.ibm.com/support/knowledgecenter/SSPREK_9.0.2/com.ibm.isam.doc/admin/concept/
con_appliance_cli.html

Question 8 Single choice

The security deployment professional of an IBM Security Access Manager V9.0 solution has been using routing files to customize message logging.

Which aspect of the logging activity can be controlled?

  1. A

    Size of log file

  2. B

    Delete log files

  3. C

    Log compression

  4. D

    HTML formatting

Show answer and explanation

Correct answer: A

Question 9 Single choice

The IBM Security Access Manager (ISAM) V9.0 deployment professional is attempting to strike the correct balance between ease of administration/configuration and security, and wants to limit where in the environment security policy can be changed.

On which ISAM component is the Secure Web Settings -> Policy Administration tool automatically disabled?

  1. A

    Runtime cluster restricted node

  2. B

    Master External Reference Entity

  3. C

    Distributed Session Cache primary node

  4. D

    Runtime cluster Standby Policy Server node

Show answer and explanation

Correct answer: B

Question 10 Single choice

Which Hypervisor is supported for a Virtual Appliance?

  1. A

    Hyper-V

  2. B

    ESXi 5.0

  3. C

    VirtualBox

  4. D

    VMware Workstation

Show answer and explanation

Correct answer: B