IBM WebSphere Datapower SOA Appliances Firmware V3.8.1, Solution Implementation Set 3

Question - 15 Maximum mark : - 27

Home
All Exams
IBM WebSphere Datapower SOA Appliances Firmware V3.8.1, Solution Implementation Online Practice Exams
IBM WebSphere Datapower SOA Appliances Firmware V3.8.1, Solution Implementation Set 3

A customer wants to deploy WebSphere DataPower in the DMZ to authenticate and authorize client requests sent by an external partner company before passing these requests to a backend. The employees of the partner company change rapidly so individual partner employee credential data should not be held locally by the customer. To simplify the configuration of the DMZ, DataPower should perform authentication and authorization on the device. Which of the following configurations will allow this?

Use an internal DataPower AAAInfo file to both authenticate and authorize the requests. ✘ Use the AAA authentication cache to hold an internal copy of the partners LDAP identity server and use thisto authenticate and authorize the requests. ✘ Have the partner insert a signed SAML token containing credential information into the request andconfigure DataPower to verify the signature of this token using an internal certificate. ✘ Configure DataPower to authenticate and authorize the requests received from the partner using Tivoli Access Manager and then insert a signed SAML token issued by Tivoli Federated Identity Manager into the
requests. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

The implementation of Authentication and Authorization using WebSphere DataPower for a particular project requires a custom stylesheet. Which of the following is a valid reason for this?

All DataPower functionality uses stylesheets so Authentication and Authorization always requires a stylesheet. ✘ The client message contains a custom token with security credentials in a proprietary format which is notsupported by DataPower. ✘ The security data in the message has been encrypted using XML encryption and must be decrypted using acustom stylesheet so that Authentication and Authorization can be performed. ✘ The standard DataPower AAA Policy logs all rejections. This project will receive a very large number ofmessages which fail Authentication and therefore will generate excessive logging information. A custom stylesheet must be used to disable this logging. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

For virusscanning message attachment , WebSphere DataPower appliances use which protocol to support integration with 3rdparty virus scanners?

SOAP (Simple Object Access Protocol) ✘ MVIP (MultiVendor Integration Protocol) ✘ IMAP (Internet Message Access Protocol) ✘ ICAP (Internet Content Adaptation Protocol) ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

A company has an extensive list of Miscellaneous XML Threats that they require protection from.
This list includes:
XML Entity Expansion and Recursion Attacks
XML Wellformednessbased
Parser Attacks
Memory Space Breach and Buffer Overflow Attacks
Public Key DoS Attacks
Resource Hijack Attacks
Schema Poisoning Attacks
What must this company do to protect SOA Applications exposed via a WSDL and a WSProxy service?

Enable the WSProxys SQL Injection Protection ✘ Enable the WSProxys XML Virus (XVirus) Protection ✘ Enable the WSProxys Single Message XML Denial of Service (XDoS) Protection ✘ Enable the WSProxys Multiple Message XML Denial of Service (MMXDoS) Protection ✔ Nothing is required ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

A company wants to implement an XMLbased service that returns customer data. Which of the following configuration steps in an Multi-Protocol Gateway (MPGW) can be used to prevent malicious requests from returning data for multiple customers?

Set Loop Detection to on in the Advanced Settings tab of the MPGW. ✘ Set the XML Maximum Nodes parameter to 1 in the XML Threat Protection tab of the MPGW. ✘ Insert a Filter action on the response rule and select the SQL Injection filter from the dropdown list. ✘ Insert a Validate action on the response rule and assign a schema that restricts the response to a singlerecord. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

A company is receiving malicious web service payloads that contain thousands of extraneous XML namespaces. What can be done in a WebSphere DataPower service to prevent this type of attack?

No action must be taken; this attack will be automatically prevented. ✘ Set the Resolve All Namespaces parameter to 'on' in the Advanced tab. ✘ Set a reasonable limit on the XML Maximum Distinct Namespaces parameter in the service's XMLManager. ✘ Insert a Filter action in the service's request rule and select store:///namespacefilter.xsl from the dropdown list. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

A company wants to ensure that all its backend SOAP/HTTPS services are protected from unauthorized internal access. The security architect has recommended SSL mutual authentication to be configured from WebSphere DataPower to the backend services. The SSL profile for mutual authentication is correctly configured on DataPower and the implementer wants to confirm if the backend services have configured their mutual authentication correctly. A successful transaction is run through DataPower to the backend services. Which of the following tests could the solution implementer use to confirm that mutual authentication is working correctly end-toend?

There are no warnings in the DataPower logs so mutual authentication is successfully being performed There are no errors in the DataPower logs therefore mutual authentication is successfully being performed Run a packet capture on the interface communicating with the backend and observe the SSL handshakeincludes the optional client authentication steps. Run a packet capture on the interface communicating with the backend and observe the SSL handshakeincludes the optional server authentication steps. Remove the Identification Credential from the forward crypto profile on DataPower; if the request does notsucceed, the backend mutual authentication is correctly configured.

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

A company is using a DataPower Multi-Protocol Gateway (MPGW) service to dynamically choose between two thirdparty backend service providers, each using SSL for security. Which of the following would be the MOST secure option for the company to connect to either service?

The MPGW cannot be used at runtime to access two backend service providers. ✘ Implementer uses an SSLProxyProfile that uses a validation credential that contains both the servicecertificates. ✘ Implementer uses an SSLProxyProfile that uses an identification credential that contains both the servicecertificates. ✘ Implementer sets var://service/routingurl and var://service/routingurlsslprofile in a custom stylesheet dynamically picking the SSLProxyProfile based on which service is requested. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Connectivity to which of the following protocols can be directly protected with SSL mutual authentication in WebSphere DataPower using firmware V3.8.1?

MQ queue manager ✘ NFS ✘ SQL Data Source ✘ IMS Connect ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

10.

Which is NOT a valid characteristic of a Front Side Handler?

A single Front Side Handler can accept multiple requests from the client over multiple protocols. ✘ Each instance of an HTTP, HTTPS, FTP, or raw XML Front Side Handler listens to a specific pair of IPaddress and port number. ✘ Each WebSphere JMS or TIBCO EMS Front Side Handler refers to a JMS server and the associated GETand PUT queues. ✘ Each WebSphere MQ Front Side Handler refers to a WebSphere MQ queue manager and the associatedPUT and GET queues used for communication. ✔ Front Side Handlers provide protocolspecific connection points to clients requesting services from abackend server. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Prev Next

Congratulations

you have successfully completed the test

Back to Question View Result

Detail Form

We will send your result on your email id and phone no. please fill detail

Name

Email ID Note: Report will be send to the above Email ID

Phone No

IBM WebSphere Datapower SOA Appliances Firmware V3.8.1, Solution Implementation Set 3

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner