IBM C2150-201 valid dump torrent : Fundamentals of Applying IBM Security Systems Identity and Access Assurance

A customer is not allowing the usage of self-signed certificates in its production environment. The customer has its own Public Key Infrastructure (PKI), and all certificates should be issued by this Certification Authority using their internal processes.
What needs to be done when going into production with the IBM Security products from the Identity and Access Assurance software bundle?

• A. Identity all communication channels using SSL, and extract the involved self-signed certificates. Submit these to the Certification Authority of the customer to be cross-signed. Reconfigure the communication channels to use these new certificates and put the Certification Authority certificate in the truststore of all involved components.
• B. Use the IBM keytool to reconfigure all communication channels to use one single certificate issued by the Certification Authority of the Customer. Put the Certification Authority certificate in the truststore of the keytool.
• C. Configure all security components to use the PKI from the customer. Required certificates will automatically be generated and trusted during installation.
• D. Identify all communication channels using SSL, and create Certificate Signing Requests for them. After receiving the certificates, configure all secure communication channels to use these certificates, and install the Certification Authority certificate in the truststore of all involved components.

Which component of the IBM Security Access Manager for Web Appliance performs front end load balancing?

• A. IBM Security Manager WebSEAL
• B. IBM Security Manager Policy Server
• C. IBM Security Web Gateway Appliance
• D. IBM Security Manager Authorization Server

Which two statements are relevant when planning a scalable Security Access Manager for Enterprise Single Sign-On deployment? (Choose two.)

• A. A clustered deployment of Websphere Application Servers allows for easy addition of IMS servers.
• B. A single instance of IMS server on a Websphere Application Server is all that is required.
• C. A combination of AD and other LDAP directory servers is not supported and you must select one or the other.
• D. Fingerprint authentication is not supported in a virtual appliance deployment.
• E. As the number of users increases, appropriate sizing and tuning become very important.

A customer is using Microsoft Active Directory to manage access to all the applications in the organization. When an employee joins the organization, in order to set up his/her access to the applications through Active Directory, as a regular practice, the administrator would clone the Active Directory permissions from an existing employee in the same job role and assign it to the new employee. Over the years, employees have been changing their job roles within the organization. Whenever a job role change occurs, the same practice of cloning the access from an existing employee in the new job role is followed. As the AD permissions are cloned, the existing permissions for the employee changing the job role are not removed.
What is the potential problem and solution for this customer?

• A. An annual revalidation of access will require a lot of manual effort in validating required access for an employee based on his/her job role. Also to maintain compliance, any access associated with the previous job role needs to be revoked. This problem can be addressed by deploying IBM Security Access Manager to implement a Role Based Access Control (RBAC) model and automate role revalidation.
• B. An annual revalidation of access will require a lot of manual effort in validating required access for an employee based on his/her job role. Also to maintain compliance, any access associated with the previous job role needs to be revoked. This problem can be addressed by deploying IBM Security Identity Manager to implement a Role Based Access Control (RBAC) model and automate role revalidation.
• C. An annual revalidation of access will require a lot of manual effort in validating required access for an employee based on his/her job role. Also to maintain compliance, any access associated with the previous job role needs to be revoked. This problem can be addressed by deploying IBM Security Access Manager to manage fine grained access on Active Directory, implement Single Sign-On and automate role revalidation.
• D. As the existing access is never cleaned up when an employee changes job roles and new access is assigned as per the new job role, many employees may be violating SoD policies. This problem can be identified and addressed by deploying IBM Security Access Manager and designing specific SoD policies.

What is a pre-requisite when planning an IBM Security Access Manager for Enterprise Sign-On implementation?

• A. IBM Security Identity Manager must already be deployed in the environment.
• B. Users must use only Windows desktops or laptops to access applications.
• C. Active Directory or a generic LDAP server must be available for user validation.
• D. The customer environment should contain one or more AIX servers.