Certification Study Guide: IBM Tivoli Access Manager for e-business 6.0

242 Certification Study Guide: IBM Tivoli Access Manager for e-business 6.0

Questions

1. Which registry server suffix is required by IBM Tivoli Access Manager for

e-business?

a. cn=root

b. o=tivoli,c=us

c. secAuthority=Default

d. cn=secAuthority,o=tivoli

2. Which two are prerequisites for installing the WebSEAL ADK? (Choose two).

a. GSKit

b. WebSphere fix pack 2

c. IBM Tivoli Access Manager for e-business ADK

d. Access Manager for e-business authorization server

e. IBM Tivoli Directory Server SDK

3. Which command is used to list the status of the IBM Tivoli Access Manager

for e-business processes on UNIX machines?

a. iv_status

b. am_status

c. pd_status

d. pd_start status

4. Which three entries are defined by default in the ACL of the IBM Tivoli

Directory Server suffix in order to manage users and groups from IBM Tivoli

Access Manager for e-business? (Choose three.)

a. default-webseal

b. cn=SecurityGroup,secAuthority=Default

c. cn=management,cn=SecurityGroup,secAuthority=Default

d. cn=users/groups,cn=SecurityGroup,secAuthority=Default

e. cn=ivacld-servers,cn=SecurityGroup,secAuthority=Default

f. cn=remote-acl-users,cn=SecurityGroup,secAuthority=Default

5. What is the default listening port for the authorization server?

a. 7135

b. 7136

c. 7234

Appendix B. Sample questions 243

d. 7235

6. Which syntax would prevent a user from logging in to pdadmin from outside of

the company network?

a. acl modify testacl set any-other Tr

b. acl modify testacl set any-other unauthenticated

c. pop modify testpop set ipauth add 9.0.0.0 255.0.0.0 0

d. pop modify testpop set ipauth anyothernw deny 9.0.0.0 255.0.0.0 0

7. Which two end-user authentication methods are supported by WebSEAL to

its junctioned Web servers for web SSO? (Choose two.)

a. basic authentication

b. kerberos authentication

c. SPNEGO authentication

d. forms-based authentication

e. SecurID token-based authentication

8. Which HTTP header value is passed by default to a back-end web server?

a. iv-user

b. iv-creds

c. iv-groups

d. iv-server-name

9. What occurs if the aznapi-configuration stanza of the IBM Tivoli Access

Manager for e-business WebSEAL configuration file contains the following

entry: logsize=-1?

a. No records are logged.

b. A configuration error message is displayed.

c. No rollovers are performed and the log grows indefinitely.

d. A new file is created each time the logging process starts and every 24

hours thereafter.

10.Given an IBM Tivoli Access Manager for e-business error message number,

which command returns the associated message text?

a. pdadmin errnum

b. pdadmin errtext

c. pdadmin server errnum

d. pdadmin server errtext