最新的IBM C2150-201免費考試真題

問題1

Which scenario is typical for onboarding a new web application into IBM Security Access Manager for Enterprise Single Sign-On?

A. Use AccessStudio to create a new application profile. Add a condition so the profile is only available to your test users. After confirmation of the test users, remove the condition to enable the profile for all users in the production environment.

B. Create a junction configuration in the test environment, confirm successful authentication, export configuration from test import into production environment.

C. Use AccessStudio directly in production environment to create a new application profile, confirm by using the test functionality in AccessStudio, and upload new application profile to production IMS server.

D. Use AccessStudio to create a profile in the test environment. Confirm the profile works and use it directly in the production environment.

正確答案: A

問題2

A company is planning to design an identity and access management solution across multiple data centers which will automate the user life cycle management and streamline their access management process.
Which two key design principles should be factored in for designing a comprehensive identity and access management solution? (Choose two.)

A. Design for integrity

B. Design with single zone

C. Design for single layer of defense

D. Design for single data center and then extend it

E. Design for accountability

正確答案: C,E

問題3

A customer is not allowing the usage of self-signed certificates in its production environment. The customer has its own Public Key Infrastructure (PKI), and all certificates should be issued by this Certification Authority using their internal processes.
What needs to be done when going into production with the IBM Security products from the Identity and Access Assurance software bundle?

A. Configure all security components to use the PKI from the customer. Required certificates will automatically be generated and trusted during installation.

B. Identify all communication channels using SSL, and create Certificate Signing Requests for them. After receiving the certificates, configure all secure communication channels to use these certificates, and install the Certification Authority certificate in the truststore of all involved components.

C. Identity all communication channels using SSL, and extract the involved self-signed certificates. Submit these to the Certification Authority of the customer to be cross-signed. Reconfigure the communication channels to use these new certificates and put the Certification Authority certificate in the truststore of all involved components.

D. Use the IBM keytool to reconfigure all communication channels to use one single certificate issued by the Certification Authority of the Customer. Put the Certification Authority certificate in the truststore of the keytool.

正確答案: D

問題4

A customer wants to lockdown administrator access to the IBM Security Identity Manager console. The customer also wants the user to access it using domain credentials and then Single Sign-On to the console.
Which product should be used in this situation?

A. IBM Security Privilege Identity Manager

B. IBM Security Access manager for Operating System

C. IBM Security Identity Manager

D. IBM Security Access manager for Web

正確答案: A

問題5

A company is in the process of extending the setup of its master-replica directory server environment to include more subtrees to meet the growing needs of the organization.
What can be used to add subtrees to the existing setup using web admin tool?

A. Directory Management > Manage Topology > Add Subtree

B. Replication Management > Manage Directory > Add Subtree

C. Directory Management > Manage Directory > Add Subtree

D. Replication Management > Manage Topology > Add Subtree

正確答案: D

問題6

Why should a company aim for regulatory compliance with PCI security standards?

A. To assist executive management with industry practice

B. To be able to process credit cards

C. To comply with local law

D. To be able to process medical information

正確答案: C

問題7

A customer's IT infrastructure includes ten different directories, one for each country branch. The customer now needs a single directory for some centralized applications. The customer would like to make as few changes in the environment as possible.
Which product do you recommend?

A. IBM Security Directory Integrator

B. IBM Security Access Manager for Web

C. IBM Security Identity Manager

D. IBM Security Directory Server

正確答案: A

最新的IBM Fundamentals of Applying IBM Security Systems Identity and Access Assurance - C2150-201免費考試真題

聯系我們

站內鏈接

最新更新