Refined of C2150-575 download materials and questions pool for IBM certification for client, Real Success Guaranteed with Updated C2150-575 pdf dumps vce Materials. 100% PASS IBM Tivoli Federated Identity Manager V6.2.2 Implementation exam Today!
2021 May C2150-575 Study Guide Questions:
Q51. In IBM Tivoli Federated Identity Manager V6.2.2 using SAML V2.0, which name identifier format will trigger the account linking process to store an alias?
A. urn:oasis:names:tc:SAML:2.0:nameid-format:entity
B. urn:oasis:names:tc:SAML:2.0:nameid-format:persistent
C. urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified
D. urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
Answer: B
Explanation:
Q52. Click the Exhibit button.
Which three statements are true regarding this SAML 1.1 flow diagram? (Choose three.)
A. An artifact is contained in the response in Step 2.
B. The assertion is sent with an HTTP 200 response in Step 2.
C. The HTTP response in Step 4 must be a 302 redirect based upon the resource requested and the user's authorized access.
D. The HTTP response in Step 4 can be anything the destination site chooses based upon the resource requested and the user's authorized access.
E. This is a Browser/POST profile, so in Step 3 the assertion is sent to the Assertion Consumer Service endpoint through an HTTP POST of an HTML form.
F. This is a Browser/Artifact profile, so the artifact received in Step 2 must be sent to the Artifact Resolution Service in Step 3, and the assertion must be retrieved through a SOAP backchannel in Step 4.
Answer: B,D,E
Explanation:
Q53. WebSEAL is used as the Single Sign-On point of contact for an IBM Tivoli Federated Identity Manager V6.2.2 (TFIM) SAML 1.1 identity provider (IdP) configuration using Browser/Artifact with the service provider (SP). What is the action order in an IBM WebSphere Application Server diagnostic trace of the TFIM IdP when an inter-site transfer service request is received?
1. Run the SAML token creation Security Token Service (STS) module to produce the assertion.
2. Generate the artifact.
3. Run the appropriate mapping function for the federation partnership against the STS Universal User (STSUU) object.
4. Redirect the user to the SP Attribute Retrieval Service.
A. 3, 1, 4, 2
B. 2, 1, 3, 4
C. 3, 1, 2, 4
D. 2, 3, 1, 4
Answer: C
Explanation:
Rebirth C2150-575 exam prep:
Q54. Which statement is true about the default operation of the IBM Tivoli Federated Identity Manager V6.2.2 User Self Care Enrollment Process?
A. It is a one step process.
B. Users can request an identity and receive an e-mail with their user ID and password.
C. Users have unlimited time to complete their enrollment without having to restart the process.
D. Users can request an identity and receive a link in an e-mail after the identity is validated as unique.
Answer: D
Explanation:
Q55. Which type of Single Sign-On protocol exchanges cannot be viewed using a browser traffic capture tool?
A. Browser/POST
B. Browser/Redirect
C. HTTP-Artifact SOAP channel
D. SSL encrypted protocol flows
Answer: C
Q56. Which IBM WebSphere Application Server (WAS) security properties must be configured so WAS can be used as an IBM Tivoli Federated Identity Manager V6.2.2 point of contact?
A. Application and container security are enabled
B. Application and JEE/J2EE security are enabled; Single Sign-On (SSO) is disabled
C. Server and cluster security are enabled; SSO (LTPA Token) are enabled
D. Application and administration security are enabled; SSO (LTPA Cookie) is enabled
Answer: D
Explanation:
Real C2150-575 cram:
Q57. What is the default file name of the IBM Tivoli Directory Integrator log?
A. tdi.log
B. ibmdi.log
C. ibmdisrv.log
D. ibmdirectoryintegrator.log
Answer: B
Explanation:
Q58. What is correct regarding cookies received from a browser?
A. The browser determines which cookies to send and includes only the cookie names and values in the request.
B. The browser determines which cookies to send and includes only the cookie names, values, and expiration times in the request.
C. The browser determines which cookies are eligible to send, and then if a Cookies-Requested header is in the previous response from the server, only cookies named in the Cookies-Requested value will be sent. Only the cookie names and values are included in the request.
D. The browser determines which cookies are eligible to send, and then if a Cookies-Requested header is in the previous response from the server, only cookies named in the Cookies-Requested value will be sent. Only the cookie names, values, and expiration times are included in the request.
Answer: A
Q59. To capture diagnostic trace information for IBM Tivoli Federated Identity Manager V6.2.2 (TFIM) protocol exchanges, which component of IBM WebSphere Application Server must have diagnostic trace enabled?
A. dmgr
B. appsrvr
C. nodeagent
D. the specific application server on which the TFIM runtime is deployed (for example, "fimAS")
Answer: D
Explanation:
Q60. Assume a SAML 2.0 Identity Provider (IdP) Single Sign-On federation is defined in IBM Tivoli Federated Identity Manager V6.2.2 (TFIM), and a Service Provider (SP) is defined as a partner to this federation. Which step is always required?
A. The partner must provide a metadata file for their SP configuration which can be imported to define the SP partner to TFIM.
B. A metadata file for the IdP configuration must be provided to the partner which can be imported to define the IdP in their configuration.
C. The partner must provide a metadata file for their SP configuration to the IdP, and a metadata file for the IdP configuration must be provided to the partner and imported to generate the respective partnering configurations.
D. The partner may optionally provide a metadata file for their SP configuration which can be imported to define the SP partner to TFIM. If a metadata file is not provided, the configuration values may be individually entered in the partner creation dialogue.
Answer: A
Explanation: