IBM Security Access Manager V7.0 Implementation - 000-198 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

What is the most flexible option to reduce the impact on a growing number of suffixes?

A. Limit the search scope by setting the parameter 'user-and-group-in-same-suffix' B. Properly set ACL's to exclude certain suffixes from usage by Security Access Manager C. Dynamic ordering of the suffix list; the search list is periodically updated based on incrementing suffix counters D. Limit the search scope by setting the parameter 'ignore-suffix'

Discussion 0

Correct Answer: C Vote an answer

Question 2

What modes are supported by the staging utility on Common Auditing and Reporting Server?

A. Full, Incremental, Prune B. Trim, Full, Chronological C. Historical, Trim, Incremental D. Historical, Incremental, Prune

Discussion 0

Correct Answer: D Vote an answer

Question 3

Recently the Risk Officer of your organization discovered that all key databases containing web certificates in the organization are protected with a very weak password. You are assigned to change the password on every key database into a more complex one. How can this be accomplished?

A. Open iKeyman, open the appropriate key database, enter the current password, and select "Change Password". B. Generate a new stash file using command "ibmstash -db key.kdb -stash key.sth -password -newpassword " C. Edit the webseald-default.conf configuration file and change the pointers to the key database password from a stash file to a plain text password and specify the password. D. This is not possible, a new key database has to be created; the current certificates can be exported from the old KDB into the new one.

Discussion 0

Correct Answer: A Vote an answer

Question 4

What POP attribute is necessary to require SSL encryption to access a particular resource?

A. quality of protection set to 'integrity' B. quality of protection set to 'ssl' C. quality of protection set to 'privacy' D. quality of protection set to 'https'

Discussion 0

Correct Answer: C Vote an answer

Question 5

Security Access Manager supports the use of Tivoli Common Directory logging, how is it enabled?

A. Select this option during the installation of the Security Access Manager product B. By setting properties in the Tivoli Common Directory properties file C. In the TAM-runtime configuration file D. Tivoli Common Directory is by default enabled

Discussion 0

Correct Answer: A Vote an answer

Question 6

Which statement is true for the ISAM appliance snapshot?

A. It is a copy of the state of the appliance at a certain time. B. It is only a backup of the LMI. C. It is a backup of all WebSEAL instances. D. It is a backup of the Policy Server and WebSEAL instances.

Discussion 0

Correct Answer: A Vote an answer

Question 7

If a user's account was compromised and the password was immediately changed by an unauthorized user, which report details all events executed for a specific period in time?

A. User Password Change History Report B. Failed Authentication History Report C. Failed Authorization History Report D. Audit Event History by User Report

Discussion 0

Correct Answer: D Vote an answer

Question 8

What is the default Runtime environment routing file on a UNIX-based system?

A. /opt/PolicyDirector/etc/routing B. /var/ibm/tivoli/common/routing C. /opt/PolicyDirector/etc/rte_routing D. /opt/pdweb/etc/routing

Discussion 0

Correct Answer: A Vote an answer

Question 9

What would the command "ldapsearch -p 389 -D cn=root -w ? -b cn=connections,cn=monitor -s base objectclass=*" return?

A. The current established client connections. B. The current_workqueue_size. C. The auto_connection_cleaner_run. D. The number of monitor threads available.

Discussion 0

Correct Answer: A Vote an answer

Question 10

When using step-up authentication, where is the authentication level from the EAI authentication specified?

A. The protected object policy (POP) B. The [authentication-levels] stanza of the instance configuration file C. The HTTP header of the response from the EAI server D. The [step-up] stanza of the instance configuration file

Discussion 0

Correct Answer: C Vote an answer