IBM Security Access Manager V7.0 Implementation Sample Questions:

1. There is a requirement to return a specific redirect page instead of a 302 response. Which WebSEAL configuration will achieve this?

A) [acnt-mgt]
enable-html-redirect = no
html-redirect = redirect.html
B) [acnt-mgt]
enable-html-redirect = yes
html-redirect = redirect.html
C) 302=yes
html-redirect = redirect.html
D) [acnt-mgt]
html-redirect = redirect.html

2. Recently the Risk Officer of your organization discovered that all passwords for the key databases containing web certificates in the organization are stored in plain text in the webseald-default.conf file, this is not acceptable and must be configured to be more secure. How can this be accomplished?

A) Use iKeyman to create a stash file, reconfigure the webseald-default.conf file to use this stash
file instead of the plain text password option to
open a key database.
B) Use iKeyman to create a hash file, reconfigure the webseald-default.conf file to use this hash
file instead of the plain text password option to
open a key database.
C) Generate a stash file using command "ibmstash -db key.kdb -stash key.sth -password password> -newpassword ";
next reconfigure the webseald-default.conf file to use this stash file instead of the plain text
password option to open a key database.
D) Generate a hash file using command "ibmhash -db key.kdb -hash key.hash -password password> -newpassword ";
next reconfigure the webseald-default.conf file to use this hash file instead of the plain text
password option to open a key database.

3. When configuring a Standby Policy Server environment for Security Access Manager environment on AIX, what two conditions apply? (Choose two.)

A) The policy database and the configuration files that are used by the policy server must be on a shared disk array.
B) The registry server must be available and installed on a same system.
C) Both the primary and standby policy servers must be on separate AIX systems that are part of a High Availability Cluster Multi-Processing (PowerHA) environment.
D) Each AIX system must have access to a different disk array that is configured for data redundancy.
E) The registry server must be available and installed on a separate system.

4. Given a registry suffix of o=ibm,c=us, how would you create an "Accounting" group using the commands below?

A) create group Accounting cn=Accounting,o=ibm,c=us
B) group create Accounting cn=Accounting,o=ibm,c=us cn=Accounting Accounting
C) add group Accounting cn=Accounting,o=ibm,c=us cn=Accounting Accounting
D) group create Accounting

5. Given a default setup of ISAM, ITDS and a Microsoft SharePoint backend.
A Web environment is experiencing performance issues. In order to analyze tracing is temporary switched on using the following commands.
server task web04-webseald-unix08 trace set pdweb.debug 2 file path=/tmp/trace.log
server task web04-webseald-unix08 trace set pdweb.debug 0
During analysis of the trace.log various common occurrences appear, the following trace.log extract displays only the lines important for this question.
2013-05-26-22:08:01.681+02:00I ----------------- Browser ===> PD ----------------- 2013-05-2622:08:01.684+02:00I ----------------- Browser <=== PD ----------------- 2013-05-2622:08:09.283+02:00I ----------------- Browser ===> PD ----------------- 2013-05-2622:08:16.682+02:00I ----------------- PD ===> BackEnd ----------------- 2013-05-2622:08:17.049+02:00I ----------------- PD <=== BackEnd ----------------- 2013-05-2622:08:17.051+02:00I ----------------- Browser <=== PD ----------------
What can be concluded by analyzing this trace excerpt?

A) This excerpt indicates that ITDS has a performance issue.
B) This excerpt indicates that the backend has a performance issue.
C) This excerpt indicates that the backend is not available.
D) This excerpt indicates no performance or other issues.

Solutions: