C2150-609: IBM Security Access Manager V9.0 Deployment

A customer has a developed an OAuth 2.0 Client application to access resources on behalf of a user. The customer states that the OAuth client has the following two constraints:

The OAuth client is not capable of maintaining its credentials confidential for authentication with the authorization server.
The resources owner does not have a trust relationship with the client.

What is the suitable OAuth 2.0 grant type for the API Protection Policy if the user resource accessed by the OAuth 2.0 client is to be protected by IBM Security Access Manager V9.0?

Implicit Grant
Client Credential Grant
Authorization Code Grant
Resource Owner Password Credentials Grant

Correct answer: B

In a customer environment, a REST API client is being developed to carry out Reverse Proxy configuration and maintenance. As part of one of the activities the customer needs to update the junction information with an additional Backend Server. The customer has written a REST API client but is not able to modify the junction.

Which HTTP headers should the customer pass?

Host, Authorization
Host, Accept: Application/json
Authorization, Accept: Application/json
content-type: application/json, Authorization

Correct answer: C

During installation WebSEAL provides a default certificate key database that is used to authenticate both clients and junctioned servers.

Which stanza entry of the WebSEAL configuration file points to the default certificate key database (i.e. kdb file)?

ssl-keyfile
jct-cert-keyfile
webseal-cert-keyfile
webseal-cert-keyfile-label

Correct answer: C

A company has a large number of users who use mobile applications. The company wants to implement context-aware access controls for these resources.

Which module of IBM Security Access Manager V9.0 should the company enable to support this requirement?

Federation module
Protocol Analysis module
Mobile Access Control module
Advanced Access Control module

Correct answer: D

Explanation:

Reference: https://www-01.ibm.com/common/ssi/cgi-bin/ssialias?infotype=an&subtype=ca&appname=gpateam&supplier=897&letternum=ENUS215-191

A request for a virtual host junction shows an unexpected source IP address.

Which troubleshooting tool can be used to investigate this issue?

Host File
Snapshots
Support Files
Packet Tracing

Correct answer: A

An IBM Security Access Manager V9.0 deployment professional is charged with monitoring request response times from WebSEAL to the backend. The deployment professional wants the flexibility to see response times per request, per junction, per HTTP return code, or other criteria that may come up in the future.

What action will generate the required data for this analysis?

Customize the request.log to include response times
Run pdadmin “stats get pdweb.jct” on all junctions on a regular basis
Run pdadmin stats get pdweb.https” and “stats get pdweb.http” on a regular basis
Write a REST API script to pull “application interface statistics” on a regular basis

Correct answer: A

A deployment professional attempts to log into an appliance which is part of a cluster to run pdadmin commands and receives the following message:

pdadmin> login-a sec_master –p password

2016-03-03-02:04:38:.683-06:001 ---0x1354A420 pdadmin ERROR ivc socket mtsclient.cpp 2376

0x7fc2b7b0c720

HPDCO1056E Could not connect to the server 192.168.254.11, on port 7135.

Error: Could not connect to the server. (status 0x1354a426)

What should the deployment professional check concerning the login target?

Login was attempted on a special node
Login was attempted on a restricted node
Login was attempted on a secondary master that has not been promoted to the primary
Login was attempted on a non-primary master of a cluster and the primary policy server is down.

Correct answer: C

A customer is migrating from TAM v6.1 running on AIX to IBM Security Access Manager (ISAM) V9.0 hardware appliance.

Which information form the TAM v6.1 environment will be useful in sizing the new ISAM V9.0 hardware configuration?

WebSEAL request logs
WebSEAL CDAS specifics
Number of LDAP replicas
Number of objects in the protected object space

Correct answer: B

There is an SSL connectivity issue between the IBM Security Access Manager V9.0 Reverse Proxy and the backend business application.

Which Two troubleshooting commands under Tools in the application SSH interface can be used to validate the Reverse Proxy can successfully connect to the backend host: secure-port? (Choose two.)

Ping
Session
Connect
Traceout
Connections

Correct answer: AB

An IBM Security Access Manager V9.0 Reverse Proxy has a stateful junction to a Portal application called “/wps” There is no web server in front of Portal. This junction has three Portal servers defined behind it. The Portal team needs to do maintenance on each of the three servers. The team wants to accomplish with least impact to end users.

Which pdadmin “server task” based steps will accomplish this?

Stop a server, have Portal team apply maintenance, bring server online-repeat for the other two servers.
Delete a server, have Portal team apply maintenance then add server back-repeat for the other two servers.
Take a server offline, have Portal team apply maintenance, bring server online- repeat for the other two servers.
Throttle a server, ensure activity has ceased for that server, have Portal team apply maintenance, bring server online-repeat for the other two servers.

Correct answer: C

Vendor:	IBM
Exam Code:	C2150-609
Exam Name:	IBM Security Access Manager V9.0 Deployment
Date:	Feb 25, 2019
File Size:	661 KB

Download IBM Security Access Manager V9.0 Deployment.C2150-609.PassLeader.2019-02-25.138q.vcex

How to open VCEX files?

Demo Questions

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

ProfExam at a 20% markdown