QUESTION: 17

The customer currently maintains all its users in Active Directory. As part of its new IBM Security Access Manager (ISAM) V9.0 deployment, the customer understands it will have to implement the ISAM "Global Sign-on (GSO)" to achieve SSO with certain backend applications which do their own authentication and cannot be modified.
Which federated repositories configuration will address the customer requirements?

Use an external ISDS LDAP as the ISAM Primary LDAP, federate with the AD and import all AD users into the ISAM TDS
Configure the AD as the ISAM Primary LDAP, which will create the necessary secauthority=default suffix. Import all users into the ISAM AD
Use the ISAM embedded LDAP as the Primary LDAP, federate with the AD and configure "basic user", and specify "basic-user-principal-attribute = samAccountName"
Use an external ISDS LDAP as the Primary LDAP, federate with the AD, configure "basic user", specify "basic-user-principal-attribute = samAccountName" and "basic-user-search-suffix = secauthority=default"

Answer(s): B

Reveal Solution Next Question

QUESTION: 18

A customer has three LDAP servers: A master (ds1.example.com), another master (ds2.example.com) and a read-only replica (ds3.example.com) used for IBM Security Access Manager (ISAM) V9.0. The deployment professional has configured the ISAM runtime using ds1.example.com as the registration server.
Which configuration will provide load balancing for LDAP read across all three servers and failover to ds2.example.com for LDAP write?

replica = ds2.example.com,389,readonly,5
replica = ds3.example.com,389,readonly,5
replica = ds2.example,com,389,readwrite,6
replica = ds1.example.com.389,readonly,6
replica = ds2.example.com,389,readonly,6
replica = ds3.example.com,389.readonly,6
replica = ds2.example.com,389,readwrite,4
replica = ds1.example.com,389,readonly,4
replica = ds2.exomple.com,389,readonly,4
replica = ds3.example.com.389,readonty,4
replica = ds2.example com,389,readwrite,6
replica = ds1.example.com,389,readonly,1
replica = ds2.example.com,389,readonly,2
replica = ds3.example.com,389,readonly,3
replica = ds2.exomple.com,389,readwrrte,4

Answer(s): A

Reveal Solution Next Question

QUESTION: 19

Which web resource should be used to keep up to date on support flashes, fixpack announcements, and other product related issues?

The IBM Support Portal
The IBM Security twitter account
The LinkedIn IBM Security Access Manager V9.0 Group
The IBM devWorks IBM Security Access Manager V9.0 Forum

Answer(s): D

Reveal Solution Next Question

QUESTION: 20

A customer has deployed an IBM Security Access Manager V9.0 solution to protect web applications. After the initial authentication between the client and WebSEAL, WebSEAL can build a new Basic Authentication header and use the --b option to provide the authenticated Security Access Manager user name (client's original identity) together with a predefined static password across the junction to the back-end server.
Which configuration option will accomplish this?

b gso
b filter
b ignore
b supply

Answer(s): C

Reveal Solution Next Question

Free C2150-609 Exam Braindumps (page: 5)

QUESTION: 17

QUESTION: 18

QUESTION: 19

QUESTION: 20