C Examcollection.Premium.Exam.104q

Transcription

1 C Examcollection.Premium.Exam.104q Number: C Passing Score: 800 Time Limit: 120 min File Version: Exam Code: C Exam Name: IBM Tivoli Identity Manager V5.1 Implementation

2 Selftestengine QUESTION 1 Which two join directives can be used when multiple provisioning policies affect the same account? {Choose two.) A. Xor B. Not C. And D. None E. Union E QUESTION 2 Which two options should be included in a custom adapter design document? (Choose two.) A. supported platforms, Java version, log file locations B. input requirements, installation instructions, prerequisites C. process flow diagram, debugging information and log file information D. prerequisites, supported platforms, process flow diagrams, source code E. security certificate configuration, installation location, input requirements Correct Answer: BC QUESTION 3 Which information is stored in a certificate used to secure the connection between IBM Tivoii Identity Manager Server and its adapters? A. certificate expiration date B. certificate encryption type C. certificate requester's name D. certificate encryption strength QUESTION 4 Which option Is relevant to gathering requirements and creating an IBM Tivoli Identity Manager (Tivoli Identity Manager) system architecture document?

3 A. formulate list of QUESTION NO:s, identify interviewees, identify timelines for project phases, and delegate responsibility B. formulate list of QUESTION NO:s, identify interviewees, identify network topology, and ensure business continuity planning C. formulate list of QUESTION NO:s, identify interviewees, discuss organization chart structure, and discuss Tivoli Identity Manager ACI and group security model D. discuss firewall rules, discuss certificate installations for HTTPS communication, and discuss Tivoli Identity Manager Web application security and hljack-prevention features Correct Answer: B QUESTION 5 Which sequence of actions best describes a secure practice for sensitive data in an IBM Tivoll Identity Manager (Tivoli Identity Manager) database? A. Schedule periodic database backups regularly in order to prevent losing sensitive data. B. Enable security on the WebSphere Application Server and disallow running the WebSphere Application Server using a non-root account. C. Restrict tietwutk traffic to those ports ur systems needed by the deployment only. If you write your own application and use a Tivoli Identity Manager API to retrieve sensitive data, encrypt the data before sending it over the network. D. Restrict operating system access to database files. Limit the privileges of the operating system accounts (administrative, root-privileged, or DBA) to the least privileges needed, change the default passwords, and enforce periodic password changes. Correct Answer: D QUESTION 6 Given the desired services list and organization structure design, which two options are essential to create a service design? (Choose two.) A. Define reporting data. B. Validate human resource data. C. Define organization requirements. D. Gather platform business processes. E. Gather IBM Tivoli Identity Manager access requirements D

4 QUESTION 7 In which formats can reports from the IBM Tivoli Identity Manager user interface be generated? A. PDF, CSV B. TXT, XML C. PDF, TXT D. HTML, PDF QUESTION 8 When performing analysis for designing a global identity policy, which considerations are essential? A. UID constraints of each managed service type, and the erglobalid of the person object B. which managed service has the least restrictive UID constraints, and the erglobalid of the person objects C. UID constraints of each managed service type, and which attributes are available from the person objects D. which managed service has the least restrictive UID constraints, and which attributes are available from the person object QUESTION 9 Given the information In the sample Organization Chart, which three pairs of roles are valid in a rule of a separation of duty policy? (Choose three.) A. Operations and Web Page design B. Development and Web page design C. Operations and Production Web Team D. Web page design and Production Web Team E. Engineering and Web Infrastructure Engineering F. Development and Web Infrastructure Engineering DF

5 QUESTION 10 In preparation for an initial identity or Identity feed to I3M Tivoli Identity Manager (Tivoli Identity Manager) V5.1,, which two person attributes are required as a minimum in the feed? (Choose two.) A. Last Name (attribute sn) B. Common Name (attribute en) C. Organizational Unil (attribute ou) D. First Name (attribute givenname) E. Employee Number (attribute employeenumber) B QUESTION 11 In a CSV identity feed, what is the definition of the name attribute? A. the attribute that uniquely identifies the person B. the attribute that contains the full name of the person C. the attribute that is used by IBM Tivoli Identity Manager to resolve account ownerships during reconciliations D. the attribute that contains the fully qualified DN of the person in the IBM Tivoli Identity Manager ou=person container QUESTION 12 What is the proper ordering of tasks during an IBM Tivoli Identity Manager V5.1 solution project? A. solution design, installation, configuration, customization, testing, turn over B. assessment, solution design, installation, customization, configuration, testing, turn over C. assessment, solution design, installation, configuration, testing, customization, turn over D. assessment, solution design, installation, configuration, customization, testing, turn over Correct Answer: D QUESTION 13 When can an IBM Tivoli Identity Manager (Tivoli Identity Manager) functional test case be executed on a Tivoli Identity Manager adapter? A. after performance tests on the adapter have been completed B. after the adapter is installed and the corresponding service has been reconciled C. when a remediation procedure exists as part of the risk assessment if the test case fails

6 D. after test cases on the Tivoli Identity Manager server configuration have been completed Correct Answer: D QUESTION 14 Which two options would be included in a customization design? (Choose two.) A. definitions of content for all approval s B. JavaScript for the Active Directory service identity policy C. a matrix of requirements for password policies for all UNIX platforms D. requirements for JavaScript extensions that will be used in workflows E. requirements for a service provider that will be used to interface with the managed platform using Web Services Correct Answer: DE QUESTION 15 Which steps are needed to create an organization structure design from an existing organization and reporting structure? A. define organization structure, review organization structure with customer, document organization structure B. review organization and reporting structure, formalize organization structure, document organization structure C. gather organization structure requirements, discuss alternatives, formalize organization structure, document organization structure D. gather organization structure requirements, formalize organization structure, review organization structure with customer, document organization structure QUESTION 16 Which basic tasks should a recertification process include? A. user notification, user acknowledgment B. user notification, user acknowledgment, logging C. manager notification, manager approval, logging D. user notification, user acknowledgment, manager approval, logging Correct Answer: B

7 QUESTION 17 Which option would be most appropriate to include in a lifecycle management design? A. provisioning policy definition B. the requirements for dynamic role definition C. reconciliation requirements for Active Directory D. the requirements for how often to check for inactive accounts Correct Answer: D QUESTION 18 Where do the assembly lines associated with RMI-based adapter functions reside? A. IBM Tivoli Identity Manager LDAP B. IBM Tivoli Identity Manager database C. IBM Tivoli Identity Manager property files D. IBM Tivoli Directory Integrator Solutions directory QUESTION 19 On a single-server WebSphere configuration, where is the SelfServiceUI.properties file located? A. <ITIM_HOME>/data B. <WAS_PROFILE_HOME>\installedApps\<node_name>\itim_self_service.war C. <WAS_PROFILE_HOME>\installedApps\<node_name>\ITIM.ear\itim_self_service.war D. <WAS_PROFILE_HOME>\installedApps\<node_name>\ITIM.ear\itim_self_seivice.war/custo m QUESTION 20 Which two steps are required to independently install IBM Tivoli Directory Integrator (Tivoli Directory Integrator) on a separate computer? (Choose two.) A. Read the IBM Tivoli Identity Manager (Tivoli Identity Manager) release notes relating to support levels of Tivoli Directory Integrator and fixes required.

8 B. After Tivoli Identity Manager is installed, the agentless adapters and the adapter profiles are automatically installed on the computer that hosts Tivoli Identity Manager. C. After Tivoli Identity Manager is installed, the agentless adapters are automatically installed. Manually install the adapter profiles on the computer that hosts Tivoli Identity Manager. D. After Tivoli Identity Manager is installed, manually install the 5.1 agentless adapters provided with the product on the computer that hosts Tivoli Directory Integrator. Manually install the adapter profiles on the computer that hosts Tivoli Identity Manager. E. After Tivoli Identity Manager is installed, the agentless adapters are automatically installed on the computer that hosts Tivoli Identity Manager. Import the adapter profiles using the Import/Export facility on the Tivoli Identity Manager administrative console. D QUESTION 21 In a cluster installation, which option should be used to create the IBM Tivoli Identity Manager V5.1 installation directories? A. Directory name must be unique for all cluster members. B. Directory name must be the same for all cluster members. C. Directory name must contain the host name of the cluster members. D. Directory should be shared among cluster members on a storage area network (SAN) drive Correct Answer: B QUESTION 22 Which two commands are used to schedule a report in IBM Tivoli Common Reporting? (Choose two.) A. trcmd -run B. scheduler-run C. scheduler-set D. trcmd -distribute E. scheduler distribute D QUESTION 23 What is the initial logon password for the itim manager user? A. reset B. admin

9 C. secret D. itim mana QUESTION 24 What sets of areas can be disabled on the Self Service Console? A. Banner area, Toolbar area, and Footer area B. Banner area, Content area, and Footer area C. Content area, Banner area, and Toolbar area D. Navigation area, Toolbar area, and Content area QUESTION 25 Which statement is true regarding the function that post office configuration can provide? A. The post office template can be cloned to reuse as different types of aggregate templates. B. It allows a test of aggregation to be performed with chosen notification style from the administrative console. C. It controls the volume of notifications if post office is enabled globally and Is not disallowed by Workflow activities. D. It provides the capability to configure an alert facility to indicate that notifications are not being sent to the mail server QUESTION 26 Which two tasks can be included as direct URL links on the IBM Tivoli Identity Manager V5.1 Administrative Console home page? (Choose two.) A. Manage service types. B. Monitor recycle bin properties. C. Set workflow notification properties. D. Change core component logging levels. E. Configure number of search results displayed on a panel C

10 QUESTION 27 Which option describes the choices for defining an activity template? A. The system template can be modified. B. User-defined templates are not allowed. C. Only system-defined templates can be selected. D. The system template can be copied and modified Correct Answer: D QUESTION 28 The join directive behavior for the provisioning policy for the ITIMService needs to be customized. Which option is the correct method to change the join behavior? A. From the navigation tree, select Manage Services> ITIMService > Configure Policy Join Behaviors. B. From the navigation tree, select Manage Policies > Manage Provisioning Policies, and click Service Type to select ITIMService. C. From the Tivoli Identity Manager administrative console, select Configuration > Policy, and click Service Type to select ITIMService D. From the navigation tree, select Configure System > Configure Policy Join Behaviors, and click Service Type to select ITIMService. Correct Answer: D QUESTION 29 What are the two valid settings or behaviors for the enrole.workflow.notify password property? (Choose two.) A. True: notification of a password change is sent to the user. B. False: notification of a password change is not sent to the user. C. Sup: notification of a password change is not sent to the user; it is instead sent to his supervisor (manager). D. URL: notification of a password change is sent to the user. The contains a URL where the user can obtain the password by entering his shared secret. E. False: notification of a password change is sent to the user. The contains a URL where the user can obtain the password by entering his shared secret. E

11 QUESTION 30 What JavaScript engine is used by IBM Tivoli Identity Manager V5.1 as a script interpreter? A. IBM JSEngine B. Windows Scripting Host C. Rhino JavaScript Engine D. PHP JavaScript Interpreter QUESTION 31 The IBM Tivoli Identity Manager (Tivoli Identity Manager) Server uses a placement rule to determine where in the organization chart a person should be placed. Which statement is true regarding placement rules? A. Placement rules are only evaluated during an add operation. B. Placement rules are written with JavaScript that returns the organization path in a common name (en) format. C. Placement rules are written with JavaScript that returns the organization path in a distinguished name (dn) format. D. If organization information cannot be determined by the placement rule, then the person is not added to the Tivoli Identity Manager directory QUESTION 32 Afresh copy of IBM Tivoli Identity Manager (Tivoli Identity Manager) has been installed and the Active Directory (AD) adapter profile has been imported. Where are the labels for the attributes on the AD account form stored? A. Tivoli Identity Manager database B. Tivoli Identity Manager LDAP directory C. Formtemplates.properties in <$itim_home>/data D. CustomLabels.properties file in <$itim_home>/data QUESTION 33 Which three types of files control the appearance of the Self-Service user interface? (Choose three.) A. Properties configuration files B. Java Archive (JAR) configuration files

12 C. Java Key Store (JKS) configuration files D. HyperText Markup Language (HTML) flies E. Java Server Pages (JSP) configuration files F. Cascading Style Sheet (CSS) configuration files EF QUESTION 34 Which two actions cause dynamic roles to be reevaluated? (Choose two.) A. when the LDAP filter is modified B. when a new ou is added to the organization tree C. when a person entity's personal information is modified D. when the IBM Tivoli Identity Manager LDAP schema is updated E. when an associated provisioning policy is modified (one for which the role defines membership) C QUESTION 35 Which IBM Tivoli Identity Manager service types are available by default? A. IDI data feed, HTTP identity feed, XML B. RMI dispatcher, DAML service, Hosted service C. DSML identity feed, CSV identity feed, Hosted service D. LDAP service, Windows service, inetorgperson identity feed QUESTION 36 Which two fields are required when an identity policy is defined? (Choose two.) A. Name B. Prefix C. Business Unit D. Common Name E. Organizational Name C

13 QUESTION 37 Which IBM Tivoli Identity Manager (Tivoli Identity Manager) users can approve exemptions to Separation of Duty policy violations? A. Only the Policy owner can approve exemptions to Separation of Duty violations. B. Approval of exemptions to Separation of Duty policy violations is not allowed in Tivoli Identity Manager. C. Only members of the Tivoli Identity Manager Administrator Group can approve exemptions to Separation of Duty violations. D. Both members of the Tivoli Identity Manager Administrator Group and the Policy owner can approve exemptions to Separation of Duty violations. Correct Answer: D QUESTION 38 When specifying All Users in the Organization as the membership type for a provisioning policy, which option describes the operation of the policy when a single service is specified as the manual entitlement? A. All users on the system can only have an account of the specified service. B. Any user in the system is authorized to have an account on the specified service. C. This policy overrides any automatic policy for the same service for all users in the system. D. All users in the system will be provisioned an account on the specified service when the policy is evaluated Correct Answer: B QUESTION 39 For IBM Tivoli Identity Manager (Tivoli Identity Manager) 5.1 DAML-based adapters, what item relating to reconciliations can be configured using agentcfg? A. use of xforms.xml B. use of LDAP v3 reconciliation filters C. specification of supporting-data-only reconciliation parameters D. use of SSL communication with the Tivoli Identity Manager server Correct Answer: D QUESTION 40

14 Click the Exhibit button. Based on the logical architecture, which action can be considered to enforce provisioning policies on target resources during the identity feed process? A. Configure adapters to enforce provisioning policies of new identities. B. Enable workflow to enforce provisioning policies of incoming identities. C. Initiate a reconciliation activity immediately on an identity feed service. D. Schedule a reconciliation to run at a specific interval. During the reconciliation, IBM Tivoli Identity Manager automatically enforces provisioning policies. Correct Answer: B QUESTION 41 Which two statements are true when enabling increased trace logging to help determine a problem in IBM Tivoli Identity Manager? (Choose two.) A. Set logger.trace.level=debug_max in errorlogging.properties. B. Set logger.trace.com.ibm=debug_ma>; in errorlogging.properties. C. Set logger.trace.level=debug_max in the file enrolelogging.properties. D. Turn on the setting logger.trace.logging=true in enrolelogging.properties. E. Configure the setting logger.trace.level=10 for maximum detail in the trace log D

15 QUESTION 42 Which statement is true of message, trace, and authentication log formats in IBM Tivoli Identity Manager (Tivoli Identity Manager)? A. All files are stored by Tivoli Identity Manager in XML format. B. All files are stored by Tivoli Identity Manager in HTML format. C. All files are stored by Tivoli Identity Manager in CTGIM format. D. All files are stored by Tivoli Identity Manager in plaintext format QUESTION 43 After making changes to a custom adapter and reloading the profile into IBM Tivoli Identity Manager (Tivoli Identity Manager) using the import capability, a test is run on the adapter. The test results show that the changes did not appear to make any difference in the results. After inspecting the IBM Tivoli Directory Integrator (Tivoli Directory Integrator) log file for the adapter, the logging statements that were added do not appear to be logging any output. What is one possible explanation for this behavior? A. Logging is not supported in Tivoli Directory Integrator-based adapters. B. The existing profile must be uninstalled before installing a new profile update. C. The Tivoli Directory Integrator server was not restarted after the profile was reloaded. D. Tivoli Identity Manager must be restarted after making any changes to the profile information QUESTION 44 Which command can be used on a UNIX system to collect data to be sent to a support representative? A. ffdc.sh B. itiittbackup. sh C. collect_ffdc.sh D. serviceability.sh Correct Answer: D QUESTION 45

16 Which statement is true when evaluating a placement rule on an identity feed service? A. The placement rule is only evaluated if the "Use workflow" option is checked. B. The placement rule determines the placement of the identity into organizational roles. C. The placement rule returns the organizational container where the identity is to be anchored. D. The placement rule returns a true or false value to determine if an identity can be placed into IBM Tivoli Identity Manager or not QUESTION 46 When migrating IBM Tivoli Identity Manager (Tivoli Identity Manager) from a test to a production environment, which task is valid? A. Export all the LDAP user accounts from test to production. B. Use the Import/Export feature to migrate the Tivoli Identity Manager configuration. C. Assign the Tivoli Identity Manager test server the same host name as the production server. D. Copy all the IBM Tivoli Directory Server data files to the Tivoli Identity Manager production system Correct Answer: B QUESTION 47 New accounts that are reconciled from a remote platform are put up for adoption through the applicable adoption policy, or they are orphaned. What person attribute Is matched against the account eruid attribute by the default global adoption policy in IBM Tivoli Identity Manager V5.1? A. the sn attribute B. the en attribute C. the uid attribute D. the eraliases attribute QUESTION 48 What are the correct steps to set up a reconciliation of only supporting data after the service definition has been created and reconciliation was not initially defined? A. Supporting data can only be reconciled when the service is created B. Existing service definitions are displayed by selecting Configure System > Managing Service Types. C. Existing service definitions are displayed by selecting Manage Services and then searching for the specific

17 service. When the service is listed, click the service name hyperlink to specify the Query to Reconcile supporting data only. D. Existing service definitions are displayed by selecting Manage Services and then searching for the specific service. When the service is listed, selecting the icon next to the name of the service will allow the administrator to set up Reconciliation and specify the Query to Reconcile supporting data only. Correct Answer: D QUESTION 49 IBM Tivoli Identity Manager (Tivoli Identity Manager) development has released a fix pack to address a specific problem that was found with the reporting module. Which three components, at a minimum, should be backed up? (Choose three.) A. JDK/SDK B. Database C. JMS queues D. LDAP Directory E. WebSphere Application Server configuration files F. Data subdirectory of Tivoli Identity Manager installation directory Correct Answer: BDF QUESTION 50 The IBM Tivoli Identity Manager (Tivoli Identity Manager) system has been installed and configured with the initial default parameter settings. The administrator detects rollback errors in the trace.log.which area of the Tivoli Identity Manager system should the administrator review in order to eliminate the rollback errors? A. Transaction rollbacks can be reduced or eliminated by creating additional indexes for the Directory Server. B. Transaction rollbacks can be reduced or eliminated by increasing the number of max_connections for the IBM HTTP Server. C. Transaction rollbacks can be reduced or eliminated by adjusting the database storage space or database locking or database memory. D. Transaction rollbacks can be reduced or eliminated by increasing the value of SearchAIUmUsedTimeout parameter for the RMI Dispatcher

18 QUESTION 51 Which two options are correct for configuring the recycle bin in IBM Tivoli Identity Manager (Tivoli Identity Manager)? (Choose two.) A. The recycle bin is disabled by default in Tivoli Identity Manager and must be enabled explicitly. B. The recycle bin age limit is the number of days, after which the recycle bin is emptied automatically. C. The recycle bin can be explicitly emptied by running the Tivoli Identity Manager runconfig script and setting the Recycle Bin Age Limit parameter to 0 (zero). D. The recycle bin age limit is the number of days after which an object in the recycle bin is eligible for deletion by the Tivoli Identity Manager IdapClean cleanup script. E. The recycle bin holds data objects that are deleted from the Tivoli Identity Manager LDAP repository and the Tivoli Identity Manager database during the course of operations. D QUESTION 52 Which option describes a prerequisite for installing an IBM Tivoli Identity Manager (Tivoli Identity Manager) fix pack? A. Stop the LDAP server that is used to contain the Tivoli Identity Manager data. B. Install the WebSphere Update installer for the appropriate WebSphere version. C. Make sure that the WebSphere server that is running the Tivoli Identity Manager application is running. D. Ensure that the SOAP request timeout value is set to 150 or less by using the com.ibm.soap. requesttimeout property Correct Answer: B QUESTION 53 What is the main purpose of the IBM Tivoli Identity Manager recycle bin? A. to enhance LDAP performance B. Data subdirectory of Tivoli Identity Manager installation directory C. to preserve a history of user IDs that have been used D. to provide a ready-recoverability of inadvertently deleted objects E. to provide a quick failover mechanism if IBM Tivoli Identity Manager LDAP fails

19 Correct Answer: B QUESTION 54 IBM Tivoli Identity Manager (Tivoli Identity Manager) development has released a fix pack to address a specific problem that was found with the reporting module. Which three components, at a minimum, should be backed up? (Choose three.) A. JDK/SDK B. Database C. JMS queues D. LDAP Directory E. WebSphere Application Server configuration files Correct Answer: BD QUESTION 55 Which three statements are valid regarding the IBM Tivoli Identity Manager organization tree? (Choose three.) A. ACIs are attached to nodes in the organization tree. B. After it is defined, an organization tree cannot be modified. C. An organization tree can have multiple organizational units. D. People are attached at a single point in the organization tree. E. There can be only one organization at the top of the organization tree. F. Locations, organizational units, and business partner organizations are technically different containers CD QUESTION 56 What is the key area of concern when considering the high availability (HA) design for the IBM Tivoli Identity Manager (Tivoli Identity Manager) Application Server? A. the directory server replication framework to eliminate single points of failure and provide peer-to-peer failover for the Tivoli Identity Manager application server B. the configuration of DB2 high availability disaster recovery (HADR) to eliminate single points of failure and provide peer-to-peer failover for the Tivoli Identity Manager application server C. the configuration of the WebSphere Application Server vertical clustering to eliminate single points of failure and provide peer-to-peer failover for the Tivoli Identity Manager application server D. the WebSphere Application Server high availability framework and configuration to eliminate single points of failure and provide peer-to-peer failover for the Tivoli Identity Manager application server

20 Correct Answer: D QUESTION 57 Which two options should be included in a custom adapter design document? (Choose two.) A. supported platforms, Java version, log file locations B. input requirements, installation instructions, prerequisites C. process flow diagram, debugging information and log file information D. prerequisites, supported platforms, process flow diagrams, source code E. security certificate configuration, installation location, input requirements Correct Answer: BC QUESTION 58 Which methodology can be used to extend the standard password rules? A. None; password rules cannot be extended. B. Password rules can be extended using JavaScript. C. Password Java APIs can be used to extend password rules. D. Password rules can be extended using the Pluggable Authentication Module (PAM) framework QUESTION 59 Which two statements are true in relation to designing custom person entities? (Choose two.) A. Required attributes must be specified in new entity objectclasses. B. A custom person objectclass must have inetorgperson as its parent. C. ACIs for the new person entities must be defined before the entity is created. D. An objectclass can be used by multiple person entities in IBM Tivoli Identity Manager. E. An entity's objectclass in IBM Tivoli Identity Manager can be named the same as the objectclass in the customer's authoritative source directory. Correct Answer: BE

21 QUESTION 60 Which information is stored in a certificate used to secure the connection between IBM Tivoli Identity Manager Server and its adapters? A. certificate expiration date B. certificate encryption type C. certificate requester's name D. certificate encryption strength QUESTION 61 Which statement is correct regarding separation of duty rules? A. Each separation of duty policy has no more than 7 rules. B. With the use of a permit rule, a user can belong to all the roles in a given rule. C. The number of roles that you allow to coexist must be at least one fewer than the number of roles in the list. D. Each rule must have one or more roles listed, the number of roles to which a user can belong depends on the number in the list QUESTION 62 A customer is setting up a role-based access control (RBAC) model. Which relationship (between organizational roles and another entity) must be primarily factored in when designing organizational roles? A. the relationship between organizational roles and provisioning policies B. the relationship between organizational roles and workflow participants C. the relationship between organizational roles and entitlement workflows D. the relationship between organizational roles and IBM Tivoli Identity Manager groups QUESTION 63 What are the primary sources for gathering identity policy requirements? A. IBM Tivoli Identity Manager System Architecture and IT Security account creation procedures B. IBM Tivoli Identity Manager Solution Design Document and IT Security account creation procedures C. IBM Tivoli Identity Manager System Architecture and the access control policies for the customer's Web space

22 D. IBM Tivoli Identity Manager Solution Design Document and the access control policies for the customer's Web space Correct Answer: B QUESTION 64 During an architecture discussion, a customer states that their company already has an extensive LDAP infrastructure in place that supports the Enterprise Directory project. The Enterprise Directory is currently provisioned by a feed from a human resources system. The eventual goal is for IBM Tivoli Identity Manager (Tivoli Identity Manager) to provision the Enterprise Directory so that other external applications can use It for authentication and authorization. As a result, a significant amount of data interaction is expected to occur between Tivoli Identity Manager and the Enterprise Directory. Which option would be appropriate for a Tivoli Identity Manager architecture at the customer site? A. Create a separate instance of the LDAP directory server to use for Tivoli Identity Manager. B. Create a new suffix for Tivoli Identity Manager in the existing Enterprise Directory LDAP directory server. C. Create a new root for Tivoli Identity Manager under one of the existing suffixes in the Enterprise Directory LDAP directory server. D. Phase out the Enterprise Directory, because the Tivoli Identity Manager LDAP directory can be positioned as the Enterprise Directory by augmenting its person and account attributes. QUESTION 65 When using the IBM Tivoli Identity Manager user interface, which categories can the report templates be applied to? A. Users, Accounts, Services, Custom B. Requests, Services, Custom, Users C. Requests, Users and Accounts, Services, Audit and Security, Custom D. Transactions, Users and Groups, Services, Audit and Security, Custom QUESTION 66 A customer requires additional attributes as per their IBM Tivoli Identity Manager solution design. Which base LDAP objectclass is used to extend the schema to add new attributes to create a custom person class? A. person B. erperson C. erpersonltem

23 D. inetorgperson Correct Answer: D QUESTION 67 Identification of target platform business processes is essential to which IBM Tivoli Identity Manager configuration task? A. Adoption policies B. Account re certification C. Organization administration D. Provisioning policy join directives Correct Answer: B QUESTION 68 Which two statements are true of groups and ACIs in an out-of-the box IBM Tivoli Identity Manager (Tivoli Identity Manager) environment populated with some users and some basic services reconciled? (Choose two.) A. The default HelpDesk Assistant group allows members of that group to manage entitlement workflows. B. Groups define what tasks Tivoli Identity Manager users will see on the administrative console through their group membership. C. In the shipped product, default groups and default ACIs reflect the typical needs of administrative users in Tivoli Identity Manager. D. Access owners can access the basic services relating to their defined target group Accesses without the need for additional ACIs. E. Members of the default Auditor group need additional ACIs only to manage their directly defined subordinates in Tivoli Identity Manager D QUESTION 69 Which option describes best practices for scheduling recertification in large organizations? A. Schedule on a rolling basis. B. Schedule all accounts for the end of the calendar year. C. Schedule all accounts for the beginning of the calendar year. D. Divide the accounts into quarters and schedule them on a quarterly basis

24 QUESTION 70 Which test phase should occur first in an IBM Tivoli Identity Manager acceptance plan? A. system testing B. functional testing C. performance testing D. user acceptance testing Correct Answer: B QUESTION 71 Which task is least likely to be affected by client delays? A. installation B. assessment C. customization D. solution design Correct Answer: D QUESTION 72 Why will a test of a DAML-based adapter fail? A. HOSTADDR is incorrect in agentcfg. B. SRV_PORTNUMBER is incorrect in agentcfg. C. CA is not defined to WebSphere and USE_SSL is set to FALSE. D. USE_SSL=FALSE in agentcfg and is specified on the service form Correct Answer: D QUESTION 73 A customer has created a new custom True64 UNIX RMI-based agentless adapter profile using a toolkit capability. The customer is ready to use this profile. If IBM Tivoli Directory Integrator is installed on the same computer as IBM Tivoli Identity Manager, what is required for the customer to use this particular profile?

25 A. Import the custom jar file using Import/Export from the administrative console; install the adapter on the target. B. Import the custom jar file using Import/Export from the administrative console; the adapter profile is ready for use. C. Import the custom jar file and the Service Definition file using the Import button on Manage Services Types on the administrative console. D. Click Create under Manage Service Types, define the new Service Type name, and then browse for the new custom service schema on the LDAP class search facility. QUESTION 74 Which file must be modified to change the background color in the IBM Tivoli Identity Manager V5.1 Self- Service user interface? A. nav.jsp B. Home.jsp C. console.css D. SelfServiceUI.properties QUESTION 75 Which option lists a set of valid membership items for an ACI to protect a static organizational role in IBM Tivoli Identity Manager (Tivoli Identity Manager)? A. the owner of the role, the role members, and the administrator of the domain in which the roles resides B. the owner of the role, the supervisor of the business unit in which the role resides, and members of Tivoli Identity Manager groups C. the supervisor of the role owner, the supervisor of the business unit in which the role resides, and members of Tivoli Identity Manager groups D. the supervisor of the business unit in which the role resides, the owner of the services that the role grants access using provisioning policy, and members of Tivoli Identity Manager groups Correct Answer: B QUESTION 76 Afresh copy of IBM Tivoli Identity Manager (Tivoli Identity Manager) has been installed and the Active Directory (AD )adapter profile has been imported. Extension attributes are added to customize the AD profile. The account form labels for the new attributes are specified in which two places? (Choose two.)

26 A. schema.dsml in the AD profile B. Tivoli Identity Manager database C. Tivoli Identity Manager LDAP directory D. Formtemplales properties in <$itim_home>/data E. CustomLabels.properties file in <$itim_home>/data Correct Answer: B QUESTION 77 Under which three conditions are service selection policies evaluated? (Choose three.) A. whenever a service instance is deleted B. whenever the service selection policy script is changed C. whenever an IBM Tivoli Identity Manager user's attributes are modified D. whenever a provisioning policy that targets a service selection policy is changed E. whenever a user is added to an organizational unit where a provisioning policy is defined F. whenever a user is added to an organizational role (static or dynamic) that is a member of a provisioning policy that targets such a service selection policy Correct Answer: BCF QUESTION 78 Which two Configure View options can be set for the IBM Tivoli Identity Manager V5.1 Administrative Console? (Choose two.) A. View Accounts B. Request Accounts C. Change Passwords D. Manage Adoption Policies E. Change My Personal Profile D QUESTION 79 Click the Exhibit button.

27 A priority-based provisioning policy join directive is in place. According to the information in the table, which definition of erdivision, a single-valued attribute, will be valid during policy validation including reconciliation with policy checking enabled? A. An error will occur during evaluation. B. Policy 2 has a higher priority, therefore erdivision will be set to divisionb. C. divisiona can exist on the erdivision attribute. All other values are also valid. D. Any value other than divisionb will be invalid because enforcement = Mandatory QUESTION 80 Which option describes the initial setting of the recycle bin in IBM Tivoli Identity Manager (Tivoli Identity Manager) V5.1? A. The recycle bin is disabled by default. B. The recycle bin is enabled by default. C. There is no recycle bin in Tivoli Identity Manager V5.1. D. The recycle bin settings cannot be modified in Tivoli Identity Manager V5.1 QUESTION 81 Which option describes the processing when two provisioning policies apply to a user for the same service? A. The provisioning request fails. B. The policy with the lowest priority is the only one that is processed. C. The policy with the highest priority is the only one that is processed. D. The policies are joined according to the current join directives, and the resulting attribute elements are provisioned Correct Answer: D

28 QUESTION 82 How is the post office enabled for workflow activities? A. Workflow activities cannot use the post office function. B. On the Post Office configuration panel, select the General tab, select workflow activities, and save the post office configuration. C. Select the Notification tab on the workflow activity in the Workflow Designer, check the Use Group Topic, enter a value, and save the workflow. D. Open the Post Office configuration panel, select the Workflow tab, select the workflows that will use the post office using the check boxes, and save the post office configuration. QUESTION 83 Which two rules apply when two or more access control items conflict? (Choose two.) A. An explicit denial (using a Deny selection) by one access control item overrides an explicit grant by other access control items. B. An implied denial (using a None selection) by one access control item overrides an explicit grant by other access control items. C. An explicit grant by one access control item overrides an implied denial (using a None selection) by other access control items. D. An implied grant by one access control item overrides an implied denial (using a None selection) by other access control items. E. An explicit grant by one access control item at the organization level overrides an implied denial (using a None selection) by other access control items. C QUESTION 84 An organization would like the End User community to be able to change personal profile information. To accomplish this change in the self-service application, which two tasks would the administrator need to perform IBM Tivoli Identity Manager (Tivoli Identity Manager)? (Choose two.) A. No changes are needed to the Access Control Item. B. Change the Access Control Item and grant the modify permission for person. C. Change the Access Control Item and grant the modify permission for account. D. From the Tivoli Identity Manager Self-Service User Interface, enable the Change My Personal Profile from Set System Security > Manage Views > User Views > Configure Views > Self Service Console. E. From the Tivoli Identity Manager Administrative Console, enable the Change My Personal Profile from Set System Security > Manage Views > User Views > Configure Views > Self Service Console. Correct Answer: BE

29 QUESTION 85 What is separation of duty in IBM Tivoli Identity Manager V5.1? A. It is a feature to manage invalid combinations of Groups. B. It is a feature to manage invalid participants in Workflows. C. It is a feature to manage potential or existing Role conflicts. D. It is a feature to manage ACI violations in the Administrative Console QUESTION 86 Click the Exhibit button. What impact will the value of the enrole.ui.pagelinkmax properly have on the behavior of the Self Service Console? A. This property determines the number of page links displayed for multipage result sets. B. This property determines the maximum time period before a timeout occurs when a user clicks a link on the Self Service Console. C. This property determines the number of page links displayed for multipage result sets. It cannot exceed the value specified by the enrole.ui.pagelinkmax property specified in the ITIM_HOME/data/ui. properties file. D. This property determines the maximum number of Web page links to tasks that will be displayed in a section. If more page links exist, the Self Service Console will display a More link that can be clicked to display the rest of the tasks. QUESTION 87 Transfer between different business units is supported by which entity type? A. Person B. Service C. Provisioning policy D. Access control item QUESTION 88 When multiple password policies apply to a service, which option describes how password policy is applied to the service?

30 A. All the password policies that target the service are joined and applied. B. The password policy that most specifically targets the service is applied. C. The global password policy (that applies to All Service Types) is joined with the password policy that targets the service most specifically and applied. D. The password policy that most specifically targets the service is applied. If there Is more than one policy that targets the service at the same specificity, they are joined and applied. Correct Answer: B QUESTION 89 When adding an activity to a workflow, which option is a valid system template from which content can be created? A. RFISubmitted B. ActivityRejected C. ActivityApproved D. WorkflowComplete QUESTION 90 The IBM Tivoli Identity Manager system-wide Escalation Limit is set to 2 days 0 hours 0 minutes. The Reminder Interval is set to 1 day and an entitlement workflow approval activity (Escalation participant: Branch Manager) set to an escalation period of 3 days, 12 hours, 0 minutes. Assuming that Post office is turned off, no approval for the Access request has taken place and default Approval activity notification settings apply, which statement is true? A. The Branch Manager will receive two reminder s before receiving the escalation e- mail. B. The Branch Manager will receive an escalation after 2 days 0 hours 0 minutes as no approval has taken place. C. The Branch Manager will receive an escalation after 3 days 0 hours 0 minutes as no approval has taken place. D. The Branch Manager will receive an escalation after 3 days, 12 hours, 0 minutes as no approval has taken place Correct Answer: D QUESTION 91 Which two workflows have notification templates? (Choose two.)

31 A. new person B. new account C. suspend person D. change password E. password expiration Correct Answer: BD QUESTION 92 A company has a requirement that all account creations be logged into the Remedy tracking system. As a result, a custom JavaScript extension developed to send the new account information to Remedy in near-realtime. The new extension Java class, gbcutilitiesextension, in package com.ibm.itim.scriptextensions was developed by the IBM consulting team and packaged into gbcutilities.jar. Which addition to the scriptframework.properties file would be the most appropriate for integrating the new extension? A. ITIM.interpreter.Workflow=gbcUtilities B. ITIM.extension.Workflow.gbcUtils=com.ibm.itim.script.extensions.gbcUtilities C. ITIM.extension.Workflow.gbcUtils=com.ibm.itim.script.extensions.gbcUtilitiesExtension D. ITIM.extension.accountAdd.gbcUtils=com.ibm.itim.script.extensions.gbcUtilitiesExtension QUESTION 93 Click the Exhibit button.

32 Based on the logical architecture, which two services can be used to import the identity feed file into IBM Tivoii Identity Manager? (Choose two.) A. AD B. CSV C. DSML D. IDI Data Feed E. Hosted Service Correct Answer: BC QUESTION 94 A company uses PeopleSoft to generate a unique employee designator as each new employee is entered into the HR system. IBM Tivoii Identity Manager has been configured to import the HR data from PeopleSoft, including the unique identifier (gbcuid). As a policy, the company has used the gbcuid attribute as the DID of its managed targets. Recently, IBM consultants implemented the AD service to manage the company's primary AD domain. During the discovery phase, it was found that an older algorithm for generating AD UIDs had been used before the company's policy of using the gbcuid attribute. The older algorithm concatenated the last name with a serial number. Which action could the IBM consultants take to match all of the AD accounts to their corresponding person entities? A. In the Add workflow, set the erllases values to both the gbcuid and the value generated by the older algorithm; then rerun the data feed from PeopleSoft. B. Create an adoption rule that includes logic for returning people that correspond to both eraliases and the

33 older algorithm; then rerun the AD reconciliation. C. Create an adoption rule that includes logic for returning people that correspond to both eraliases and the older algorithm; then rerun the data feed from PeopleSoft. D. Create an adoption rule that includes logic for returning people that correspond to the older algorithm, and in the Add workflow, set the erliases values to the gbcuid; then rerun the AD reconciliation Correct Answer: B QUESTION 95 For IBM Tivoli Identity Manager (Tivoli Identity Manager) 5.1 DAML-based adapters, what item relating to reconciliations can be configured using agentcfg? A. use of xforms.xml B. use of LDAP v3 reconciliation filters C. specification of supporting-data-only reconciliation parameters D. use of SSL communication with the Tivoli Identity Manager server Correct Answer: D QUESTION 96 Which file contains the output for Java extensions that use system, out. println() methods? A. msg.log B. trace.log C. SystemOut.log D. System Err. Out QUESTION 97 Which two log files found under the WAS_HOME/profiles/<profile name>/logs/server1 directory are useful in troubleshooting an IBM Tivoli Identity Manager application problem with a standard installation using WebSphere? (Choose two.) A. msg.log B. trace.log C. SystemErr.log D. SystemOut.log E. cfg_itim_mw.log

34 D QUESTION 98 Which two statements are true when enabling increased trace logging to help determine a problem in IBM Tivoli Identity Manager? (Choose two.) A. Set logger.trace.level=debug_max in errorlogging.properties. B. Set logger trace.com.iom=debug_max in errorlogging.properties. C. Set logger trace level=debug_max in the file enrolelogging properties. D. Turn on the setting logger trace.logging=true in enrolelogging properties. E. Configure the setting logger.trace.levenio for maximum detail in the trace log D QUESTION 99 A functioning IBM Tivoli Identity Manager (Tivoli Identity Manager) test environment has been configured and tested and is ready to move into production. The information in the Tivoli Identity Manager Directory Server has been migrated to production. Additional configuration information should be promoted from the Tivoli Identity Manager server file system. Which additional data would need to be promoted to production? A. The <ITIM-HOME> directory B. The enroledatabase.properties file C. The customizations defined in the ui.properties file D. The audit tables in the Tivoli Identity Manager database QUESTION 100 When migrating IBM Tivoli Identity Manager (Tivoli Identity Manager) from a test to a production environment, which task is valid? A. Export all the LDAP user accounts from test to production. B. Use the Import/Export feature to migrate the Tivoli Identity Manager configuration. C. Assign the Tivoli Identity Manager test server the same host name as the production server. D. Copy all the IBM Tivoli Directory Server data files to the Tivoli Identity Manager production system Correct Answer: B