C2150-006 by IBM Valid Free Exam Practice Test

Question 1

When multiple password policies apply to a service, which option describes how password policy is applied to the service?

A. The password policy that most specifically targets the service is applied. B. The global password policy (that applies to All Service Types) is joined with the password policy that targets the service most specifically and applied. C. The password policy that most specifically targets the service is applied. If there Is more than one policy that targets the service at the same specificity, they are joined and applied. D. All the password policies that target the service are joined and applied.

Correct Answer: A

Question 2

Which option is vital to ensuring that IBM Tivoli Identity Manager is properly tuned?

A. Minimize the use of static roles. B. Use dynamic roles whenever possible. C. Place all ACIs as high as possible in the organization tree to ensure maximum coverage D. Ensure that all attributes used in searches are indexed in LDAP.

Correct Answer: D

Question 3

When the IBM Tivoli Identity Manager administrator is searching for a user from the Manage User > Select a User panel, the default value for Search By is set to Last Name. The administrator would like to set the default value to MyCoUid, which is a unique identifier used at MyCo. Which action must the administrator perform?

A. From the Manage Users > Select a User panel, select MyCoUid from the drop-down Search By list box and click Save B. From Configure System > Manage Entities, modify the default search attribute on the Entity Detail Information form. C. From Manage Users > Advanced Search, modify the default search attribute for the Person User type. D. Using the Directory tools, remove the Last Name attribute and add the MyCoUid attribute.

Correct Answer: B

Question 4

Which list displays all the entitlement workflow design elements available in IBM Tivoli Identity Manager?

A. Approval, Mail, RFI, Operation, Loop, Extension, Script, Work Order, Subprocess B. Approval, Loop, Subprocess, RFI, Operation, Work Order, Script, Extension C. Approval, Denial, Suspend, Subprocess, RFI, Operation, Work Order, Script, Extension D. Approval, Loop, Subprocess, RFI, Operation, Event Notification, Script, Extension

Correct Answer: A

Question 5

The account and password design document indicates that new accounts and passwords are initially set up by a designated security officer Therefore, the notification is sent to the security officer and Is not sent to each account owner. Which two options can be configured to meet this requirement? (Choose two.)

A. The IBM Tivoli Identity Manager administrator would disable the New Account Notification template and the New Password template in Configuration > Properties > Notification Templates. B. The IBM Tivoli Identity Manager administrator would disable the New Account Notification template and the New Password template in Configure System > Workflow Notification Properties. C. Configure a mail node in the operation workflow where the participant is a person with an e-mail account. D. Modify the existing e-mail notification templates to add the custom recipient. E. Design a new e-mail notification template and add to the list of available workflow notification templates.

Correct Answer: B,C

Question 6

Which two statements are true for service type account defaults? (Choose two.)

A. Account defaults must be hard-coded values or a person attribute. B. Service type account defaults are global and are inherited by a service when the service is created. C. Subsequent changes to the account defaults on the service type are not reflected in existing services. D. Service type account defaults must be specified for each created service. E. Account defaults for an existing service can be modified by changing the service type account defaults

Correct Answer: B,C

Question 7

Consider an identity synchronization scenario at a customer where the customer wants to pull in identities at scheduled times, and push emergency identity deletes to IBM Tivoli Identity Manager (Tivoli Identity Manager) for offboarding in near real time. Which statement is true in this scenario?

A. An IDI data feed identity service can be reconciled to pull in identities into Tivoli Identity Manager, and can be contacted by an external process to push identities to Tivoli Identity Manager. B. A DSML identity feed service in Tivoli Identity Manager can onboard and offboard identities. C. Identities deleted in Tivoli Identity Manager during an identity feed are never placed into the Recycle Bin. D. Reconciling an identity feed service with the Use Workflow option enabled will allow provisioning and separation of duty policies to be evaluated during processing.

Correct Answer: A

Question 8

Which default objectclass will IBM Tivoii Identity Manager V5.1 expect during an identity feed?

A. hruserOrgPerson B. userPrincipalName C. inetOrgPerson D. distinguishedName

Correct Answer: C

Question 9

Which option lists a set of valid membership items for an ACI to protect a static organizational role in IBM Tivoli Identity Manager (Tivoli Identity Manager)?

A. the owner of the role, the supervisor of the business unit in which the role resides, and members of Tivoli Identity Manager groups B. the supervisor of the role owner, the supervisor of the business unit in which the role resides, and members of Tivoli Identity Manager groups C. the owner of the role, the role members, and the administrator of the domain in which the roles resides D. the supervisor of the business unit in which the role resides, the owner of the services that the role grants access using provisioning policy, and members of Tivoli Identity Manager groups

Correct Answer: A

Question 10

After testing the SSL connection between the IBM Tivoli Identity Manager V5.1 server and the directory server, the login fails. Which two options should be checked? (Choose two.)

A. The path to the truststore file is valid. B. The truststore file is corrupted. C. The path to the IdapConfig file is valid D. The path to the .der file is valid. E. The .der file Is corrupted.

Correct Answer: A,B

Question 11

Which IBM Tivoli Identity Manager (Tivoli Identity Manager) users can approve exemptions to Separation of Duty policy violations?

A. Only members of the Tivoli Identity Manager Administrator Group can approve exemptions to Separation of Duty violations. B. Only the Policy owner can approve exemptions to Separation of Duty violations. C. Approval of exemptions to Separation of Duty policy violations is not allowed in Tivoli Identity Manager. D. Both members of the Tivoli Identity Manager Administrator Group and the Policy owner can approve exemptions to Separation of Duty violations.

Correct Answer: D

Question 12

Which two statements are true of groups and ACIs in an out-of-the box IBM Tivoli Identity Manager (Tivoli Identity Manager) environment populated with some users and some basic services reconciled? (Choose two.)

A. Access owners can access the basic services relating to their defined target group Accesses without the need for additional ACIs. B. Groups define what tasks Tivoli Identity Manager users will see on the administrative console through their group membership. C. The default HelpDesk Assistant group allows members of that group to manage entitlement workflows. D. In the shipped product, default groups and default ACIs reflect the typical needs of administrative users in Tivoli Identity Manager. E. Members of the default Auditor group need additional ACIs only to manage their directly defined subordinates in Tivoli Identity Manager

Correct Answer: A,D

Question 13

The Business Continuity Review describes the system availability characteristics of the solution design. In a typical high availability (HA) configuration, a load balancer is configured in front of several peer masters for the directory server. Which statement is true regarding load balancing in an IBM Tivoii Identity Manager (Tivoii Identity Manager) HA solution design?

A. Load balancing of write traffic is unwise, because it leads to a possibility of an update conflict B. The Tivoii Identity Manager dataservices component will assist the load balancer in the redirecting ot requests to one of the other replicated Tivoii Identity Manager servers. C. If a primary master goes down, all traffic to that master is hold until the master is available D. If the primary system goes down, the remaining systems do not need to be able to bear the work load.

Correct Answer: A

IBM Tivoli Identity Manager V5.1 Implementation - C2150-006 Exam Practice Test