Pass IBM C Exam

Transcription

1 Pass IBM C Exam Number: C Passing Score: 800 Time Limit: 120 min File Version: Exam Code: C Exam Name: IBM Tivoli Identity Manager V5.1 Implementation

2 Exact-Exams QUESTION 1 Which two join directives can be used when multiple provisioning policies affect the same account? {Choose two.) A. Xor B. Not C. And D. None E. Union E /Reference: QUESTION 2 Which two options should be included in a custom adapter design document? (Choose two.) A. supported platforms, Java version, log file locations B. input requirements, installation instructions, prerequisites C. process flow diagram, debugging information and log file information D. prerequisites, supported platforms, process flow diagrams, source code E. security certificate configuration, installation location, input requirements Correct Answer: BC /Reference: QUESTION 3 Which information is stored in a certificate used to secure the connection between IBM Tivoii Identity Manager Server and its adapters? A. certificate expiration date B. certificate encryption type C. certificate requester's name D. certificate encryption strength Correct Answer: A /Reference: QUESTION 4 Which option Is relevant to gathering requirements and creating an IBM Tivoli Identity Manager (Tivoli Identity Manager) system architecture document?

3 A. formulate list of QUESTION NO:s, identify interviewees, identify timelines for project phases, and delegate responsibility B. formulate list of QUESTION NO:s, identify interviewees, identify network topology, and ensure business continuity planning C. formulate list of QUESTION NO:s, identify interviewees, discuss organization chart structure, and discuss Tivoli Identity Manager ACI and group security model D. discuss firewall rules, discuss certificate installations for HTTPS communication, and discuss Tivoli Identity Manager Web application security and hljack-prevention features Correct Answer: B /Reference: QUESTION 5 Which sequence of actions best describes a secure practice for sensitive data in an IBM Tivoll Identity Manager (Tivoli Identity Manager) database? A. Schedule periodic database backups regularly in order to prevent losing sensitive data. B. Enable security on the WebSphere Application Server and disallow running the WebSphere Application Server using a non-root account. C. Restrict tietwutk traffic to those ports ur systems needed by the deployment only. If you write your own application and use a Tivoli Identity Manager API to retrieve sensitive data, encrypt the data before sending it over the network. D. Restrict operating system access to database files. Limit the privileges of the operating system accounts (administrative, root-privileged, or DBA) to the least privileges needed, change the default passwords, and enforce periodic password changes. Correct Answer: D /Reference: QUESTION 6 What is the proper ordering of tasks during an IBM Tivoli Identity Manager V5.1 solution project? A. solution design, installation, configuration, customization, testing, turn over B. assessment, solution design, installation, customization, configuration, testing, turn over C. assessment, solution design, installation, configuration, testing, customization, turn over D. assessment, solution design, installation, configuration, customization, testing, turn over Correct Answer: D

4 /Reference: QUESTION 7 Which steps are needed to create an organization structure design from an existing organization and reporting structure? A. define organization structure, review organization structure with customer, document organization structure B. review organization and reporting structure, formalize organization structure, document organization structure C. gather organization structure requirements, discuss alternatives, formalize organization structure, document organization structure D. gather organization structure requirements, formalize organization structure, review organization structure with customer, document organization structure /Reference: QUESTION 8 Which basic tasks should a recertification process include? A. user notification, user acknowledgment B. user notification, user acknowledgment, logging C. manager notification, manager approval, logging D. user notification, user acknowledgment, manager approval, logging Correct Answer: B /Reference: QUESTION 9 Which three database servers are supported by IBM Tivoli Identity Manager V5.1? (Choose three.) A. Oracle B. MySQL Enterprise Edition C. IBM DB2 Enterprise Edition D. IBM Informix Dynamic Server E. Sybase Adaptive Server Enterprise F. Microsoft SQL Server Enterprise Edition Correct Answer: ACF /Reference:

5 QUESTION 10 In a cluster installation, which option should be used to create the IBM Tivoli Identity Manager V5.1 installation directories? A. Directory name must be unique for all cluster members. B. Directory name must be the same for all cluster members. C. Directory name must contain the host name of the cluster members. D. Directory should be shared among cluster members on a storage area network (SAN) drive Correct Answer: B /Reference: QUESTION 11 What is the initial logon password for the itim manager user? A. reset B. admin C. secret D. itim mana /Reference: QUESTION 12 Which statement is true of Notification templates in IBM Tivoli Identity Manager (Tivoli Identity Manager) V5.1? A. JavaScript content or tags are only available to Plaintext and XHTML bodies when customizing a Workflow Notification template. B. The Tivoli Identity Manager Administrative Console will throw a parsing error if it finds a dynamic content tag Is not recognized when saving an edited template. C. The Manual Activity templates can be disabled by choosing the Disable option for the template under Configure System > Workflow Notification Properties. D. Mail templates saved using the Tivoli Identity Manager Mail activity template in Entitlement or Operational Workflows are available under Configure System > Workflow Notification Properties. Correct Answer: B /Reference: QUESTION 13 Which two tasks can be included as direct URL links on the IBM Tivoli Identity Manager V5.1 Administrative Console home page? (Choose two.) A. Manage service types.

6 B. Monitor recycle bin properties. C. Set workflow notification properties. D. Change core component logging levels. E. Configure number of search results displayed on a panel Correct Answer: AC /Reference: QUESTION 14 What are the two valid settings or behaviors for the enrole.workflow.notify password property? (Choose two.) A. True: notification of a password change is sent to the user. B. False: notification of a password change is not sent to the user. C. Sup: notification of a password change is not sent to the user; it is instead sent to his supervisor (manager). D. URL: notification of a password change is sent to the user. The contains a URL where the user can obtain the password by entering his shared secret. E. False: notification of a password change is sent to the user. The contains a URL where the user can obtain the password by entering his shared secret. Correct Answer: AE /Reference: QUESTION 15 Where can a password policy for a service reside in the organizational chart in relation to its target service? A. It can only reside in the same business unit that contains the service. B. It can reside in the same business unit that contains the service or above the business unit that contains the service. C. It can reside in the same business unit that contains the service, or below the business unit that contains the service. D. It can reside anywhere in relation to its target service because the location of the password policy is driven by the location of the users to whose passwords it will apply. Correct Answer: B /Reference: QUESTION 16 Which three types of files control the appearance of the Self-Service user interface? (Choose three.) A. Properties configuration files B. Java Archive (JAR) configuration files C. Java Key Store (JKS) configuration files

7 D. HyperText Markup Language (HTML) flies E. Java Server Pages (JSP) configuration files F. Cascading Style Sheet (CSS) configuration files Correct Answer: AEF /Reference: QUESTION 17 Which two actions cause dynamic roles to be reevaluated? (Choose two.) A. when the LDAP filter is modified B. when a new ou is added to the organization tree C. when a person entity's personal information is modified D. when the IBM Tivoli Identity Manager LDAP schema is updated E. when an associated provisioning policy is modified (one for which the role defines membership) Correct Answer: AC /Reference: QUESTION 18 Which two fields are required when an identity policy is defined? (Choose two.) A. Name B. Prefix C. Business Unit D. Common Name E. Organizational Name Correct Answer: AC /Reference: QUESTION 19 The administrator has modified the system-defined add operation for the person entity type by adding an approval node to the workflow. The requirements have changed, and the approval for adding a new person is no longer required. The administrator would like to remove the approval node from the workflow. Which activity should the administrator perform? A. From Configuration > Entities, select the person entity. Select Define Operations. Select the Add operation and Delete pushbutton option. B. From Configure System > Manage Operations, select Entity type level and the Entity type of Person. Select the Add operation and the Delete pushbutton option. C. From Design Workflows > Manage Person Request Workflows, search for the Person Add Workflow. Select the Default Person Add Workflow of type Entity override and Delete pushbutton option.

8 D. From Configure System > Manage Operations, select Entity type level and the Entity type of Person. Select the Add operation and the Change pushbutton option. Then remove the approval node from the operation diagram. Correct Answer: D /Reference: QUESTION 20 Which IBM Tivoli Identity Manager (Tivoli Identity Manager) users can approve exemptions to Separation of Duty policy violations? A. Only the Policy owner can approve exemptions to Separation of Duty violations. B. Approval of exemptions to Separation of Duty policy violations is not allowed in Tivoli Identity Manager. C. Only members of the Tivoli Identity Manager Administrator Group can approve exemptions to Separation of Duty violations. D. Both members of the Tivoli Identity Manager Administrator Group and the Policy owner can approve exemptions to Separation of Duty violations. Correct Answer: D /Reference: QUESTION 21 For IBM Tivoli Identity Manager (Tivoli Identity Manager) 5.1 DAML-based adapters, what item relating to reconciliations can be configured using agentcfg? A. use of xforms.xml B. use of LDAP v3 reconciliation filters C. specification of supporting-data-only reconciliation parameters D. use of SSL communication with the Tivoli Identity Manager server Correct Answer: D /Reference: QUESTION 22 A company uses PeopleSoft to generate a unique employee designator as each new employee is entered Into the HR system. IBM Tivoli Identity Manager has been configured to import the HR data from PeopleSoft, including the unique Identifier (gbculd). As a policy, the company has used the gbcuid attribute as the UID of its managed targets. During the implementation, which action would the IBM consultants take to match the AD accounts to their corresponding person entities and minimize any orphans? A. Set the eraliases attribute to the gbcuid. B. Configure the identity policy to return the gbcuid. C. Create a dynamic role with the filter: (eralias=gbcuid). D. Mimic the gbcuid algorithm with JavaScript for generating the uid attribute on the AD entitlements form

9 Correct Answer: A /Reference: QUESTION 23 Which two statements are true when enabling increased trace logging to help determine a problem in IBM Tivoli Identity Manager? (Choose two.) A. Set logger.trace.level=debug_max in errorlogging.properties. B. Set logger.trace.com.ibm=debug_ma>; in errorlogging.properties. C. Set logger.trace.level=debug_max in the file enrolelogging.properties. D. Turn on the setting logger.trace.logging=true in enrolelogging.properties. E. Configure the setting logger.trace.level=10 for maximum detail in the trace log D /Reference: QUESTION 24 Which statement is true when evaluating a placement rule on an identity feed service? A. The placement rule is only evaluated if the "Use workflow" option is checked. B. The placement rule determines the placement of the identity into organizational roles. C. The placement rule returns the organizational container where the identity is to be anchored. D. The placement rule returns a true or false value to determine if an identity can be placed into IBM Tivoli Identity Manager or not /Reference: QUESTION 25 New accounts that are reconciled from a remote platform are put up for adoption through the applicable adoption policy, or they are orphaned. What person attribute Is matched against the account eruid attribute by the default global adoption policy in IBM Tivoli Identity Manager V5.1? A. the sn attribute B. the en attribute C. the uid attribute D. the eraliases attribute /Reference:

10 QUESTION 26 The IBM Tivoli Identity Manager (Tivoli Identity Manager) system has been installed and configured with the initial default parameter settings. The administrator detects rollback errors in the trace.log.which area of the Tivoli Identity Manager system should the administrator review in order to eliminate the rollback errors? A. Transaction rollbacks can be reduced or eliminated by creating additional indexes for the Directory Server. B. Transaction rollbacks can be reduced or eliminated by increasing the number of max_connections for the IBM HTTP Server. C. Transaction rollbacks can be reduced or eliminated by adjusting the database storage space or database locking or database memory. D. Transaction rollbacks can be reduced or eliminated by increasing the value of SearchAIUmUsedTimeout parameter for the RMI Dispatcher /Reference: QUESTION 27 Which two options are correct for configuring the recycle bin in IBM Tivoli Identity Manager (Tivoli Identity Manager)? (Choose two.) A. The recycle bin is disabled by default in Tivoli Identity Manager and must be enabled explicitly. B. The recycle bin age limit is the number of days, after which the recycle bin is emptied automatically. C. The recycle bin can be explicitly emptied by running the Tivoli Identity Manager runconfig script and setting the Recycle Bin Age Limit parameter to 0 (zero). D. The recycle bin age limit is the number of days after which an object in the recycle bin is eligible for deletion by the Tivoli Identity Manager IdapClean cleanup script. E. The recycle bin holds data objects that are deleted from the Tivoli Identity Manager LDAP repository and the Tivoli Identity Manager database during the course of operations. Correct Answer: AD /Reference: QUESTION 28 What is the main purpose of the IBM Tivoli Identity Manager recycle bin? A. to enhance LDAP performance B. Data subdirectory of Tivoli Identity Manager installation directory C. to preserve a history of user IDs that have been used D. to provide a ready-recoverability of inadvertently deleted objects E. to provide a quick failover mechanism if IBM Tivoli Identity Manager LDAP fails Correct Answer: B /Reference:

11 QUESTION 29 IBM Tivoli Identity Manager (Tivoli Identity Manager) development has released a fix pack to address a specific problem that was found with the reporting module. Which three components, at a minimum, should be backed up? (Choose three.) A. JDK/SDK B. Database C. JMS queues D. LDAP Directory E. WebSphere Application Server configuration files Correct Answer: BD /Reference: QUESTION 30 Which three statements are valid regarding the IBM Tivoli Identity Manager organization tree? (Choose three.) A. ACIs are attached to nodes in the organization tree. B. After it is defined, an organization tree cannot be modified. C. An organization tree can have multiple organizational units. D. People are attached at a single point in the organization tree. E. There can be only one organization at the top of the organization tree. F. Locations, organizational units, and business partner organizations are technically different containers Correct Answer: ACD /Reference: QUESTION 31 Which two options should be included in a custom adapter design document? (Choose two.) A. supported platforms, Java version, log file locations B. input requirements, installation instructions, prerequisites C. process flow diagram, debugging information and log file information D. prerequisites, supported platforms, process flow diagrams, source code E. security certificate configuration, installation location, input requirements Correct Answer: BC /Reference: QUESTION 32 Which option would be included in the lifecycle management design?

12 A. reconciliation schedule for all UNIX services B. approval requirements for the Active Directory accounts C. notification to the service owner when accounts are provisioned D. notification requirements when a new IBM Tivoli Identity Manager identity is created with an identity feed Correct Answer: D /Reference: QUESTION 33 Which methodology can be used to extend the standard password rules? A. None; password rules cannot be extended. B. Password rules can be extended using JavaScript. C. Password Java APIs can be used to extend password rules. D. Password rules can be extended using the Pluggable Authentication Module (PAM) framework /Reference: QUESTION 34 Which two statements are true in relation to designing custom person entities? (Choose two.) A. Required attributes must be specified in new entity objectclasses. B. A custom person objectclass must have inetorgperson as its parent. C. ACIs for the new person entities must be defined before the entity is created. D. An objectclass can be used by multiple person entities in IBM Tivoli Identity Manager. E. An entity's objectclass in IBM Tivoli Identity Manager can be named the same as the objectclass in the customer's authoritative source directory. Correct Answer: BE /Reference: QUESTION 35 Which information is stored in a certificate used to secure the connection between IBM Tivoli Identity Manager Server and its adapters? A. certificate expiration date B. certificate encryption type C. certificate requester's name D. certificate encryption strength

13 Correct Answer: A /Reference: QUESTION 36 Which statement is correct regarding separation of duty rules? A. Each separation of duty policy has no more than 7 rules. B. With the use of a permit rule, a user can belong to all the roles in a given rule. C. The number of roles that you allow to coexist must be at least one fewer than the number of roles in the list. D. Each rule must have one or more roles listed, the number of roles to which a user can belong depends on the number in the list /Reference: QUESTION 37 What are the primary sources for gathering identity policy requirements? A. IBM Tivoli Identity Manager System Architecture and IT Security account creation procedures B. IBM Tivoli Identity Manager Solution Design Document and IT Security account creation procedures C. IBM Tivoli Identity Manager System Architecture and the access control policies for the customer's Web space D. IBM Tivoli Identity Manager Solution Design Document and the access control policies for the customer's Web space Correct Answer: B /Reference: QUESTION 38 During an architecture discussion, a customer states that their company already has an extensive LDAP infrastructure in place that supports the Enterprise Directory project. The Enterprise Directory is currently provisioned by a feed from a human resources system. The eventual goal is for IBM Tivoli Identity Manager (Tivoli Identity Manager) to provision the Enterprise Directory so that other external applications can use It for authentication and authorization. As a result, a significant amount of data interaction is expected to occur between Tivoli Identity Manager and the Enterprise Directory. Which option would be appropriate for a Tivoli Identity Manager architecture at the customer site? A. Create a separate instance of the LDAP directory server to use for Tivoli Identity Manager. B. Create a new suffix for Tivoli Identity Manager in the existing Enterprise Directory LDAP directory server. C. Create a new root for Tivoli Identity Manager under one of the existing suffixes in the Enterprise Directory LDAP directory server. D. Phase out the Enterprise Directory, because the Tivoli Identity Manager LDAP directory can be positioned as the Enterprise Directory by augmenting its person and account attributes.

14 Correct Answer: A /Reference: QUESTION 39 A customer requires additional attributes as per their IBM Tivoli Identity Manager solution design. Which base LDAP objectclass is used to extend the schema to add new attributes to create a custom person class? A. person B. erperson C. erpersonltem D. inetorgperson Correct Answer: D /Reference: QUESTION 40 Which post-upgrade validation test would verify that the custom entity object was intact? A. creating a new person B. modifying an existing ACI C. creating a new dynamic role D. scanning completed requests Correct Answer: A /Reference: QUESTION 41 Which two statements are true of groups and ACIs in an out-of-the box IBM Tivoli Identity Manager (Tivoli Identity Manager) environment populated with some users and some basic services reconciled? (Choose two.) A. The default HelpDesk Assistant group allows members of that group to manage entitlement workflows. B. Groups define what tasks Tivoli Identity Manager users will see on the administrative console through their group membership. C. In the shipped product, default groups and default ACIs reflect the typical needs of administrative users in Tivoli Identity Manager. D. Access owners can access the basic services relating to their defined target group Accesses without the need for additional ACIs. E. Members of the default Auditor group need additional ACIs only to manage their directly defined subordinates in Tivoli Identity Manager D

15 /Reference: QUESTION 42 Which test phase should occur first in an IBM Tivoli Identity Manager acceptance plan? A. system testing B. functional testing C. performance testing D. user acceptance testing Correct Answer: B /Reference: QUESTION 43 Why will a test of a DAML-based adapter fail? A. HOSTADDR is incorrect in agentcfg. B. SRV_PORTNUMBER is incorrect in agentcfg. C. CA is not defined to WebSphere and USE_SSL is set to FALSE. D. USE_SSL=FALSE in agentcfg and is specified on the service form Correct Answer: D /Reference: QUESTION 44 What configuration file is used to set up the default values for IBM Tivoli Common Reporting? A. config.xml B. defaults.xml C. defaultsconfig.xml D. reportingconfig.xml Correct Answer: D /Reference: QUESTION 45 A customer has created a new custom True64 UNIX RMI-based agentless adapter profile using a toolkit capability. The customer is ready to use this profile. If IBM Tivoli Directory Integrator is installed on the same computer as IBM Tivoli Identity Manager, what is required for the customer to use this particular profile? A. Import the custom jar file using Import/Export from the administrative console; install the adapter on the target.

16 B. Import the custom jar file using Import/Export from the administrative console; the adapter profile is ready for use. C. Import the custom jar file and the Service Definition file using the Import button on Manage Services Types on the administrative console. D. Click Create under Manage Service Types, define the new Service Type name, and then browse for the new custom service schema on the LDAP class search facility. /Reference: QUESTION 46 Generating a Certificate Signing Request (CSR) is Option A of which utility? A. CertCfg B. CertTool C. agentcfg D. agenttool Correct Answer: B /Reference: QUESTION 47 Afresh copy of IBM Tivoli Identity Manager (Tivoli Identity Manager) has been installed and the Active Directory (AD )adapter profile has been imported. Extension attributes are added to customize the AD profile. The account form labels for the new attributes are specified in which two places? (Choose two.) A. schema.dsml in the AD profile B. Tivoli Identity Manager database C. Tivoli Identity Manager LDAP directory D. Formtemplales properties in <$itim_home>/data E. CustomLabels.properties file in <$itim_home>/data Correct Answer: B /Reference: QUESTION 48 Which two Configure View options can be set for the IBM Tivoli Identity Manager V5.1 Administrative Console? (Choose two.) A. View Accounts B. Request Accounts C. Change Passwords D. Manage Adoption Policies

17 E. Change My Personal Profile D /Reference: QUESTION 49 Click the Exhibit button. A priority-based provisioning policy join directive is in place. According to the information in the table, which definition of erdivision, a single-valued attribute, will be valid during policy validation including reconciliation with policy checking enabled? A. An error will occur during evaluation. B. Policy 2 has a higher priority, therefore erdivision will be set to divisionb. C. divisiona can exist on the erdivision attribute. All other values are also valid. D. Any value other than divisionb will be invalid because enforcement = Mandatory /Reference: QUESTION 50 Which option describes the initial setting of the recycle bin in IBM Tivoli Identity Manager (Tivoli Identity Manager) V5.1? A. The recycle bin is disabled by default. B. The recycle bin is enabled by default. C. There is no recycle bin in Tivoli Identity Manager V5.1. D. The recycle bin settings cannot be modified in Tivoli Identity Manager V5.1 Correct Answer: A /Reference: QUESTION 51 Which two rules apply when two or more access control items conflict? (Choose two.) A. An explicit denial (using a Deny selection) by one access control item overrides an explicit grant by other

18 access control items. B. An implied denial (using a None selection) by one access control item overrides an explicit grant by other access control items. C. An explicit grant by one access control item overrides an implied denial (using a None selection) by other access control items. D. An implied grant by one access control item overrides an implied denial (using a None selection) by other access control items. E. An explicit grant by one access control item at the organization level overrides an implied denial (using a None selection) by other access control items. Correct Answer: AC /Reference: QUESTION 52 Transfer between different business units is supported by which entity type? A. Person B. Service C. Provisioning policy D. Access control item Correct Answer: A /Reference: QUESTION 53 When multiple password policies apply to a service, which option describes how password policy is applied to the service? A. All the password policies that target the service are joined and applied. B. The password policy that most specifically targets the service is applied. C. The global password policy (that applies to All Service Types) is joined with the password policy that targets the service most specifically and applied. D. The password policy that most specifically targets the service is applied. If there Is more than one policy that targets the service at the same specificity, they are joined and applied. Correct Answer: B /Reference: QUESTION 54 Which two workflows have notification templates? (Choose two.) A. new person B. new account

19 C. suspend person D. change password E. password expiration Correct Answer: BD /Reference: QUESTION 55 A company has a requirement that all account creations be logged into the Remedy tracking system. As a result, a custom JavaScript extension developed to send the new account information to Remedy in near-realtime. The new extension Java class, gbcutilitiesextension, in package com.ibm.itim.scriptextensions was developed by the IBM consulting team and packaged into gbcutilities.jar. Which addition to the scriptframework.properties file would be the most appropriate for integrating the new extension? A. ITIM.interpreter.Workflow=gbcUtilities B. ITIM.extension.Workflow.gbcUtils=com.ibm.itim.script.extensions.gbcUtilities C. ITIM.extension.Workflow.gbcUtils=com.ibm.itim.script.extensions.gbcUtilitiesExtension D. ITIM.extension.accountAdd.gbcUtils=com.ibm.itim.script.extensions.gbcUtilitiesExtension /Reference: QUESTION 56 Click the Exhibit button.

20 Based on the logical architecture, which two services can be used to import the identity feed file into IBM Tivoii Identity Manager? (Choose two.) A. AD B. CSV C. DSML D. IDI Data Feed E. Hosted Service Correct Answer: BC /Reference: QUESTION 57 Which file contains the output for Java extensions that use system, out. println() methods? A. msg.log B. trace.log C. SystemOut.log D. System Err. Out

21 /Reference: QUESTION 58 Which two statements are true when enabling increased trace logging to help determine a problem in IBM Tivoli Identity Manager? (Choose two.) A. Set logger.trace.level=debug_max in errorlogging.properties. B. Set logger trace.com.iom=debug_max in errorlogging.properties. C. Set logger trace level=debug_max in the file enrolelogging properties. D. Turn on the setting logger trace.logging=true in enrolelogging properties. E. Configure the setting logger.trace.levenio for maximum detail in the trace log D /Reference: QUESTION 59 A functioning IBM Tivoli Identity Manager (Tivoli Identity Manager) test environment has been configured and tested and is ready to move into production. The information in the Tivoli Identity Manager Directory Server has been migrated to production. Additional configuration information should be promoted from the Tivoli Identity Manager server file system. Which additional data would need to be promoted to production? A. The <ITIM-HOME> directory B. The enroledatabase.properties file C. The customizations defined in the ui.properties file D. The audit tables in the Tivoli Identity Manager database /Reference: QUESTION 60 Consider an identity synchronization scenario at a customer where the customer wants to pull in identities at scheduled times, and push emergency identity deletes to IBM Tivoli Identity Manager (Tivoli Identity Manager) for offboarding in near real time. Which statement is true in this scenario? A. A DSML identity feed service in Tivoli Identity Manager can onboard and offboard identities. B. Identities deleted in Tivoli Identity Manager during an identity feed are never placed into the Recycle Bin. C. Reconciling an identity feed service with the Use Workflow option enabled will allow provisioning and separation of duty policies to be evaluated during processing. D. An IDI data feed identity service can be reconciled to pull in identities into Tivoli Identity Manager, and can be contacted by an external process to push identities to Tivoli Identity Manager. Correct Answer: D /Reference:

22