IBM Fundamentals of Applying IBM Security Systems Identity and Access Assurance Sample Questions:

1. Which scenario is typical for onboarding a new web application into IBM Security Access Manager for Enterprise Single Sign-On?

A) Use AccessStudio to create a new application profile. Add a condition so the profile is only available to your test users. After confirmation of the test users, remove the condition to enable the profile for all users in the production environment.
B) Use AccessStudio directly in production environment to create a new application profile, confirm by using the test functionality in AccessStudio, and upload new application profile to production IMS server.
C) Create a junction configuration in the test environment, confirm successful authentication, export configuration from test import into production environment.
D) Use AccessStudio to create a profile in the test environment. Confirm the profile works and use it directly in the production environment.

2. A customer wants to lockdown administrator access to the IBM Security Identity Manager console. The customer also wants the user to access it using domain credentials and then Single Sign-On to the console.
Which product should be used in this situation?

A) IBM Security Access manager for Operating System
B) IBM Security Access manager for Web
C) IBM Security Privilege Identity Manager
D) IBM Security Identity Manager

3. Which three points of contact configuration options are available when installing IBM Tivoli Federated Identity Manager? (Choose three.)

A) Internet Information Services
B) WebSEAL
C) Generic point of contact server
D) JBoss Application Server
E) Apache Tomcat Application Server
F) IBM WebSphere Application Server

4. A customer wants to use integrated solutions comprising of IBM Tivoli Federated Identity
Manager STS in a SOA environment.
Which solution can help in deploying fully integrated TFIM in this situation?

A) IBM Enterprise Integrator
B) IBM Smartcloud for Social business
C) IBM HTTP Server
D) IBM WebSphere Application Server

5. A bank conducted online surveys for its customers to discover how it can improve its services.
One of the most common complaints from the bank's customers was that they have to remember so many passwords when using the bank's partner services (like stock trading, credit card point systems, and retirement investment management). The argument generally was "the bank wantedme to join the partner and even though they introduced me to them. I had to register independently and then remember another username and password." The bank would like to setup proper controls to address this most common complaint from its customers.
Which function does the bank need to use to solve this issue?

A) Role Based Access Control
B) Federated single sign-on
C) Strong password encryption techniques
D) Cross domain single sign-on

Solutions: