IBM 000-274 Exam Syllabus Topics:

IBM WebSphere DataPower SOA Appliances Firmware V5.0 Solution Implementation Sample Questions:

1. A company has an extensive list of Miscellaneous XML Threats that they require protection from. The list includes: ?XML Entity Expansion and RecursionAttacks ?XML Wellformedness-based Parser Attacks ?Memory Space Breach and Buffer Overflow Attacks ?Public Key DoS Attacks ?Resource Hijack Attacks What must the solution implementer do to protect SOA Applications exposed via a WSDL and a Web Service Proxyservice?

A) Web service proxy default options protect against these threats. No configuration is required.
B) Enable the web service proxy's ingle Message XML Denial of Service (XDoS) Protection".Enable the web service proxy's ?ingle Message XML Denial of Service (XDoS) Protection".
C) Enable the web service proxy's ultiple Message XML Denial of Service (MMXDoS) Protection".Enable the web service proxy's ?ultiple Message XML Denial of Service (MMXDoS) Protection".
D) Enable the web service proxy's QL Injection Protection?Enable the web service proxy's ?QL Injection Protection?

2. A web service proxy is configured with a subscription to a Concept in WebSphere Service Registry and Repository (WSRR) V7.5 or later. A new WSDL is added to the Concept from the WSRRinterface.
What options are available to the solution implementer or updating the web service proxy to include the new WSDL? (choose 3)

A) In the WSRR interface, open the Concept page and click 'Deploy to DataPower'.
B) Set the Synchronization Method to Poll and then wait for the RefreshInterval.
C) Set the Synchronization Method to Automatic and then wait for the WSRR refresh interval.
D) Open the WSRR Server object and set the Update field to Auto.
E) Navigate to the Advanced Proxy Settings tab and click 'Poll Now'.
F) Navigate to the WSRR Subscription Status page and click 'Synchronize'.

3. A Client sends a message to a multi-protocol gateway which uses HTTP basic authentication to authenticate the Client by usingLDAP. The parameters and transaction flow information is provided below:

How is the Client authenticated?

A) The HTTP basic authentication is used with the DataPower XML authentication file. The output credentials are used to authenticate the LDAP directory server.
B) The LDAP bind DN and password are used to authenticate the appliance to the directory service and the Client's user name and password are used to build the LDAP credentials to authenticate the Client.
C) The user name and password part of the HTTP basic authentication message are used to log in (bind) to the LDAP server.
D) The password that is sent by the Client using the HTTP basic authentication header is a critical part of the LDAPquery and is used for the genPassword() algorithm for Client bind LDAP authentication.

4. Which networkprotocol does the "Ping Remote" DataPower function use to test network connectivity to a remote system?

A) HTTP
B) ICMP
C) ARP
D) Multicast UDP

5. A solution implementer is tasked to use a DataPower appliance as an intermediary for providing Web 2.0 services. Which of the following features of Web 2.0 messages should the solution implementer be aware of when designing thesolution? (choose two)

A) Web 2.0 messages can arrive with an empty body.
B) Web 2.0 REST messages can use HTTP POST methods like SOAP messages.
C) Web 2.0 messages can be secured by WS-Security.
D) Web 2.0 use cases are best suited for a web service proxy service.
E) Web 2.0 message and a SOAP message cannot be processed by the same processing policy and front side handler of a DataPower Service.

Solutions: