050-730 - Certified Novell Identity Manager Administrator
Go back to Novell
In which order should you create and start an Active Directory driver?
1) Import the current driver packages 2) Install the driver packages 3) Configure the driver 4) Deploy the driver 5) Start the driver
What is a purpose of the DAL (Directory Abstraction Layer)?
To provide a customized view of objects and their attributes that are stored in the Identity Vault
Given the XML Document below: <nds dtdversion="3.5" ndsversion="8.x"> <source> <product version="126.96.36.19970918 ">DirXML</product> <contact>Novell, Inc.</contact> </source> <input> <add class-name="User" qualified-src-dn="O=DA\OU=USERS\CN=E123456" src-dn="\DA- TREE\DA\USERS\E123456" src-entry-id="34042" from-merge="true"> <add-attr attr-name="Facsimile Telephone Number"> <value type="structured"> <component name="faxNumber">801-555-1212</component> <component name="faxBitCount">0</component> <component name="faxParameters"/> </value> </add-attr> <add-attr attr-name="Full Name"> <value type="string">Frank Jones</value> </add-attr> <add-attr attr-name="Given Name"> <value type="string">Frank</value> </add-attr> <add-attr attr-name="Internet EMail Address"> <value type="string">[email protected]</value> </add-attr> <add-attr attr-name="Surname"> <value type="string">Jones</value> </add-attr> </add> </input> </nds> Within the Policy Builder Rule Conditions, what value will the XPATH Statement "@from- merge='true'" return?
In which of the following is the directory abstraction layer editor plug-in available?
At runtime, which performs all of the User Application's LDAP queries against the Identity Vault?
The Directory Abstraction Layer
Which report cannot be deleted and should not be run by itself?
Which are some best practices for using version control with Designer? (Choose 2.)
Assign one person to deploy a project to a production environment.
Assign one team member to a policy rather than having multiple team members work on one policy.
If you map the eDirectory attribute of Login Expiration Time to the Active Directory attribute of accountExpires, when does the account in Active Directory expire?
A day earlier than the time set in eDirectory
In an Active Directory environment, which tools enable you to view and manage the associations between drivers and objects? (Choose 2.)
Which statement is true when creating your own Entitlements?
You must add a policy to the driver for the Entitlements to work.
Which statement is true?
When an event occurs in the Identity Vault, Identity Manager creates an XML document that describes the Identity Vault event and submits it through the Subscriber channel to a driver shim.
The Integration activity automatically creates an action model for working with a Web service based on which document format?
Which view enables you to view the filters that allow the data to flow between all of the systems and the Identity Vaults as well as view how passwords flow through the different systems?
Which statements about filters are true? (Choose 2.)
You can add a class or attribute to a filter policy.
The same filter policy is used for both the Publisher and the Subscriber channels.
Which statement is true regarding the Novell Identity Manager Role Mapping Administrator?
If you have both Role Administrator and Resource Administrator roles, you can create, edit, and delete mappings.
When using Designer, what you can import at the Driver level?
Channels and policies only
Identity Manager uses a MetaDirectory Engine to process Identity Vault data and events. What component assures changes in the Identity Vault are not lost if a connected system goes offline?
When you install Active Directory drivers, you must choose an authentication method. Authentication identifies the driver shim to Active Directory and, potentially, to the local machine. Which statements are true regarding the Negotiate authentication method? (Choose 2.)
This is the preferred authentication method.
This uses Kerberos, NTLM, or a pluggable authentication scheme if one is installed.
Which statement is true regarding packages?
You can downgrade any package that has been upgraded.
The Roles Based Provisioning Module includes a read-only Role Approval workflow. Which option does this Role Approval workflow support? (Choose 2.)
The ability to display the role using localized display names
The ability to process role approvals in either serial or quorum mode
When using the Role Mapping Administrator to create a new role, you will need to select a level for the role. Which level defines lower-level privileges?
What eDirectory entities can Password Policies be assigned to? (Choose 3.)
Partition Root Object
Login Policy Object
Which are advantages of using NDS password to synchronize passwords between two Identity Vaults? (Choose 2.)
Enforcement of the basic password restrictions you can set for NDS Password
Which System Role allows members to create, remove, or modify SoD constraints?
Which statements about the Integrated Installer are true? (Choose 2.)
It automatically handles dependencies
It automatically installs all of the drivers
Which Identity Manager component allows your organization to assure that user access to resources does not break any corporate or government regulations?
The Roles hierarchy supports three levels. Which represents the highest role level?
Which statement is true regarding the output that DSTrace generates?
Rules will only be executed if their condition logic evaluates to be true.
The Requests & Approvals tab in the Identity Manager user application includes a group of actions called My Settings. The My Settings actions give you the ability to view your proxy and delegate assignments. What is the difference between a proxy and a delegate?
A delegate assignment applies to a particular type of request.
To which can you add Named Passwords? (Choose 2.)
When adding a control to a form that is being created, Designer adds a control-named Field to the bottom line of the form. Where is the name that is entered into this field used? (Choose 3.)
The ECMA expression builder dialog box
The Workflow tab's Data Item Mapping dialog box
An internal XML reference in the provisioning request definition file
Which user type works with the User Application's Identity Self-Service, Work Dashboard, and Roles and Resource tabs and has no administrative permissions?
When is the package catalog created?
When a project is created or imported
Which allows you to change Universal Password in eDirectory? (Choose 2.)
IDM User Application
Which Policy Sets are applied only during an add event?
Matching, Create, and Placement
When using Designer, which view do you use to import driver sets, drivers, and channels from the file system?
The Outline view
Which entitlement agent is ideal for simple automation?
Which is used to define Directory Abstraction Layer definitions?
Directory Abstraction Layer Editor
If there is a name conflict between different variable sources in an XPATH statement, what is the order of precedence?
Local (policy scope), Local (driver scope), and global
Using iManager, what do you need to select to allow you to see the Filter icons so that you can edit filters?
Which XPATH operator is used to select all descendent nodes at any depth below the current stated node?
Using regular expressions, which matches `a' or `b'?
In the Standard SoD Constraint Exception Approval Workflow Activity, which Activity Name determines whether the approval is a quorum condition?
Check for Processing Type
Which statement is true regarding role relationships?
Top-level roles can contain lower-level roles, but they cannot be contained by other roles.
What role does NMAS play in synchronizing passwords in an Identity Manager solution?
NMAS controls the flow of synchronizing passwords within Identity Vault.
Which is most commonly used to access ECMAScript?
Which allows you to securely store multiple passwords for a driver?
Which correctly shows the precedence of Global Configuration Values (GCVs)?
1) GCVs from the driver 2)GCVs from the driver Global Configuration list 3) GCVs from the driver set 4)GCVs from the driver set Global Configuration list
Which statement about entitlements is true?
The DirXML-EntitlementRef attribute keeps track of the entitlements that a user has been granted or revoked.
What is the naming convention for a Global Configuration Value (GCV)?