Answer: B
QUESTION 14
An administrator manages a cell that is configured to use an LDAP sewer for its user registry. But, there are
several cases where he needs certain application servers to authenticate against a file based registry. How
can this be accomplished?
A. From the deployment managers administrative console, use the application servers security
configuration wizard for each application server to override the cell level registry.
B. In the cell level security configuration panel, define LDAP authentication at the cell scope, and file based
registry at the application server scope for the desired application servers.
C. Configure Global security to use an LDAP registry and create a new security domain with a user realm
definition for the file based registry and assign it to the desired application servers.
D. Create a global security repertoire that includes a global definition for the LDAP registry as well as
entries for each node is the cell. For those nodes that have application servers that require file based
registry, include a registry override.
Answer: C
QUESTION 15
What must an administrator do before he can create method permissions for an Enterprise JavaBean
(EIB)?
A. Map role to groups.
B. Define one or more security roles.
C. Map logical role name to runtime rule.
D. Exclude a set of EIB methods from access.
Answer: B
QUESTION 16
A federated cell has two nodes, Node01 and NodeO2. Global Security is turned on and is using a file based
user registry. Node01 has servers A, B, C and D. A developer has deployed a new security check-in
application to servers A and D. As a security requirement, this new application is required to use local
operating system registry for user authentications. Identify which one of the following is the most direct way
to enable this secured application.
A. Migrate user information from operating system registry to LDAP registry.
B. Create a security domain and scope it to application server A and D.
C. Update global security configuration file security.xml with operating system registry definition.
D. Merge operating system registry and file based user registry to a new LDAP and assign the new LDAP
to the federated cell.
Answer: B
QUESTION 17
In a test cell which has WebSphere global security disabled, an administrator has created a service
integration bus (SIBus) with security enabled for testing applications that use messaging resources. Now
the administrator needs to enable security on the bus for further testing. Which of the following tasks must
be performed to enable security on the bus?
A. Enable administrative security for the cell.
B. Configure a separate security domain for the bus.
- 1
- 2
前往页