C2150-197 Online Practice Questions and Answers

Which is true for the relationship between provisioning policies, services, and roles?

A. A provisioning policy governs only services that are associated the same business unit or sub tree of the business unit with which the policy is associated. A role referenced in the provisioning policy must be associated the same business unit or sub tree of the business unit with which the policy is associated.

B. A provisioning policy governs only services that are associated the same business unit or sub tree of the business unit with which the policy is associated. A role referenced in the provisioning policy can be anywhere in the tree of the organization.

C. A provisioning policy governs services that are anywhere in the tree of the organization. A role referenced in the provisioning policy must be associated the same business unit or sub tree of the business unit with which the policy is associated.

D. A provisioning policy governs services that are anywhere in the tree of the organization. A role referenced in the provisioning policy can be anywhere in the tree of the organization.

What does IdentityPolicy.getNextCount(baseld) in an identity policy return, where baseId is the value of the base user ID? (Choose two)

A. It returns the iteration number that the identity policy is running to identify the number of times a user name had to be generated before a unique one could be found.

B. It returns the next user ID that is generated according to the rules in the Identity policy but does not check for uniqueness.

C. It returns a number that can be appended to the end of the user name to make that user name unique.

D. It returns the number of conflicts the passed user name has against all services configured in ISIM.

E. It returns-1 if the user name is already unique.

A functioning IBM Security Identity Manager (ISIM) test environment has been copied over to a production ISIM environment. Which of the following would validate the application is up and functioning correctly?

A. Login to the application and perform a password change and verify the request is scheduled and completes successfully.

B. Login to the WebSphere Administrative Console and validate the status of the ISIM application.

C. Confirm the database instance for ISIM is running.

D. Confirm the LDAP instance for ISIM is running.

Which of the following is NOT a valid certificate type for use with an ISIM v6.0 Adapter?

A. Certificate Authority (CA) certificates

B. Signature verification certificates

C. DER Self Signed certificates

D. Object signing certificates

When the role CheckWtiter is assigned to a user, a maximum check amount limit must be specified.

What is the recommended design option to implement this requirement?

A. Advice the customer this requirement involves a custom schema and a custom UI.

B. Create an Assignment attribute on the CheckWriter role called MaxCheck Amount.

C. Create multiple roles, one for each check writer's maximum check amount.

D. Extend the role schema to add an attribute called MaxCheckAmount.

When gathering requirements for Identity Policy, which ID will define the rule to generate the user ID?

A. Application Owner

B. Administrator

C. Manager

D. Auditor

How should a reconciliation schedule be configured to ignore certain accounts and certain attributes for a service?

A. Update a attribute exclusion list through the administrative console.

B. Select what attributes to return from the available attribute list.

C. Add a valid LDAP filter that will return the desired accounts.

D. Add Java script to filter out accounts.

E. Select supporting data only option.

Which two of the following are valid join directive types built-in ISIM?

A. Precedence_Sequence

B. Concatenate

C. Greatest

D. Average

E. Xor

Which of the following is not a valid command line switch when installing TDI 7.1 on windows?

A. install_tdiv711_win_x86.exe -i

B. install_tdiv711_win_x86.exe-m

C. install_tdiv711_win_x86.exe -f

D. install tdiv711 win x86.exe -r

After performing a successful test connection of an IBM Security Identity Manager (ISIM) 6.0 adapter service in ISIM, which of the following is information available on the "Status and Information" tab of the service?

A. Adapter version, profile version, adapter memory usage

B. Adapter version, number of disallowed accounts

C. Profile version, number of orphan accounts

D. Number of pending requests for the service

When setting up the Self Service User Interface to search and list shared access roles, what customization is needed to list only the enabled roles?

A. Add a Java object that can be called as an extension from a workflow, and invoke this to screen the roles.

B. Change the default flag setting in the SelfServiceUI.properties file.

C. Modify the JSP for the select function, adding appropriate javascript to select based on access enabled.

D. Use the request parameter configuration option to link some javascript to the search box.

Which of the following is correct for enrole.ui.pageSize and enrole.ui.maxSearchResults properties?

A. enrole.ui.pageSize controls the number of list items that is initially displayed on the screen, with more results made available in the UI with links to Page 2. Page 3. and so on. enrole.ui.maxSearchResults controls the maximum number of items returned for a search on one page. enrole.ui.maxSearchResults must always be less than or equal to enrole.ui.pageSize.

B. enrole.ui.pageSize controls the maximum number of pages that will be displayed when a search query exceeds one page on the screen. enrole.ui.maxSearchResults controls the maximum number of items that are allowed as output of a search. If number if search results is larger than this then I SIM returns an error on the Ul and terminates the request.

C. enrole.ui.pageSize controls the default browser size (in pixels) that the web page opens to when the application is accessed. enrole.ui.maxSearchResults controls the maximum number of items returned for a search.

D. enrole.ui.pageSize controls the number of list items that is initially displayed on the screen. enrole.ui.maxSearchResults controls the maximum number of items returned for a search.

What does the following service selection policy return?

A. It returns multiple services of the same kind for the subject to choose in a dynamic workflow.

B. It returns the service closest to the subject based on the 'location' attribute of the subject.

C. It returns the service closest to the subject in the organizational tree defined in ISIM.

D. It returns the service closest to the service that the subject has requested.

For large scale initial identity feed, what approach can help improve performance?

A. Increase the size of the memory in the WebSphere Java Virtual Machine until the data feed meets performance requirements.

B. Disable provisioning policies before importing identities into the system and then enable applicable provisioning policies.

C. Define default values for account attributes from the administrative console to overwrite data source attributes.

D. Modify the person form and reduce the number of attributes.

Which statement lists all the IBM Security Identity Manager (ISIM) components that can be tuned to provide better performance?

A. HTTP server. Websphere Application server, Directory server, Database server, and adapters.

B. HTTS server Websphere Application server, and Directory server.

C. HTTP server and Websphere Application server.

D. Directory server and Database server.