When using an RSA Authentication Agent for PAM, which of the following statements is true?

Users designated for RSA SecurID authentication must have root privileges.
A user's account must specify 'sdshell' to allow RSA SecurID authentication.
When installing the Agent for PAM, the services file must be edited to add "securid_pam" as a TCP service.
Service, rule and module information to support RSA SecurID authentication are contained in the pam.conf file.

Answer(s): D

To use an LDAP directory server as a source for user and group data in an RSA Authentication Manager database.

an Identity Source can be mapped to the LDAP directory through the Authentication Manager Operations Console.
individual data transfer jobs can be scheduled through the Scheduled Jobs function of the Authentication Manager Security Console.
a data export can be initiated on the directory server to export users and groups to the Authentication Manager database over a secure SSL connection.
a new LDAP schema is applied to the directory server to include the attribute "cn=securid" to designate users to be transferred to Authentication Manager.

Answer(s): A

If a user is attempting to log in through an Agent that is restricted,

the Agent will determine by the user's UserID if access should be granted or prohibited.
the user will be denied access if not a member of a group explicitly granted access through the Agent.
the user will be allowed access if not a member of a group explicitly prohibiting access through the Agent.
no user authentication will be allowed until the Agent is set to 'unrestricted' by an administrator with an Agent role.

Answer(s): B

Designating an " Alternate IP Address " value in an Agent record in the Authentication Manager Security Console allows

an Authentication Agent to use multiple node secret files.
an Authentication Agent to seek the fastest responding server.
an Authentication Agent to communicate with multiple servers simultaneously.
Authentication Manager to recognize IP addresses for Agent authentication requests.

Answer(s): D

Free 050-V71X-CSESECURID Exam Braindumps (page: 4)