C2150-006 - IBM Tivoli Identity Manager V5.1 Implementation
Go back to IBM
A company uses PeopleSoft to generate a unique employee designator as each new employee is entered Into the HR system. IBM Tivoli Identity Manager has been configured to import the HR data from PeopleSoft, including the unique Identifier (gbculd). As a policy, the company has used the gbcuid attribute as the UID of its managed targets. During the implementation, which action would the IBM consultants take to match the AD accounts to their corresponding person entities and minimize any orphans?
Set the eraliases attribute to the gbcuid.
Which two actions cause dynamic roles to be reevaluated? (Choose two.)
when the LDAP filter is modified
when a person entity's personal information is modified
The IBM Tivoli Identity Manager (Tivoli Identity Manager) system has been installed and configured with the initial default parameter settings. The administrator detects rollback errors in the trace.log.Which area of the Tivoli Identity Manager system should the administrator review in order to eliminate the rollback errors?
Transaction rollbacks can be reduced or eliminated by adjusting the database storage space or database locking or database memory.
A company uses PeopleSoft to generate a unique employee designator as each new employee is entered into the HR system. IBM Tivoii Identity Manager has been configured to import the HR data from PeopleSoft, including the unique identifier (gbcuid). As a policy, the company has used the gbcuid attribute as the DID of its managed targets. Recently, IBM consultants implemented the AD service to manage the company's primary AD domain. During the discovery phase, it was found that an older algorithm for generating AD UIDs had been used before the company's policy of using the gbcuid attribute. The older algorithm concatenated the last name with a serial number. Which action could the IBM consultants take to match all of the AD accounts to their corresponding person entities?
Create an adoption rule that includes logic for returning people that correspond to both eraliases and the older algorithm; then rerun the AD reconciliation.
Which option describes best practices for scheduling recertification in large organizations?
Schedule on a rolling basis.
What configuration file is used to set up the default values for IBM Tivoli Common Reporting?
Which information is stored in a certificate used to secure the connection between IBM Tivoli Identity Manager Server and its adapters?
certificate expiration date
Which two statements are true in relation to designing custom person entities? (Choose two.)
A custom person objectclass must have inetorgperson as its parent.
An entity's objectclass in IBM Tivoli Identity Manager can be named the same as the objectclass in the customer's authoritative source directory.
Which basic tasks should a recertification process include?
user notification, user acknowledgment, logging
Transfer between different business units is supported by which entity type?
Which two Configure View options can be set for the IBM Tivoli Identity Manager V5.1 Administrative Console? (Choose two.)
Manage Adoption Policies
When adding an e-mail activity to a workflow, which option is a valid system template from which e-mail content can be created?
Why will a test of a DAML-based adapter fail?
USE_SSL=FALSE in agentcfg and https:// is specified on the service form
An organization would like the End User community to be able to change personal profile information. To accomplish this change in the self-service application, which two tasks would the administrator need to perform IBM Tivoli Identity Manager (Tivoli Identity Manager)? (Choose two.)
Change the Access Control Item and grant the modify permission for person.
From the Tivoli Identity Manager Administrative Console, enable the Change My Personal Profile from Set System Security > Manage Views > User Views > Configure Views > Self Service Console.
Which option describes the processing when two provisioning policies apply to a user for the same service?
The policies are joined according to the current join directives, and the resulting attribute elements are provisioned
Which option would be included in the lifecycle management design?
e-mail notification requirements when a new IBM Tivoli Identity Manager identity is created with an identity feed
Which post-upgrade validation test would verify that the custom entity object was intact?
creating a new person
A functioning IBM Tivoli Identity Manager (Tivoli Identity Manager) test environment has been configured and tested and is ready to move into production. The information in the Tivoli Identity Manager Directory Server has been migrated to production. Additional configuration information should be promoted from the Tivoli Identity Manager server file system. Which additional data would need to be promoted to production?
The customizations defined in the ui.properties file
What are the primary sources for gathering identity policy requirements?
IBM Tivoli Identity Manager Solution Design Document and IT Security account creation procedures
The administrator has modified the system-defined add operation for the person entity type by adding an approval node to the workflow. The requirements have changed, and the approval for adding a new person is no longer required. The administrator would like to remove the approval node from the workflow. Which activity should the administrator perform?
From Configure System > Manage Operations, select Entity type level and the Entity type of Person. Select the Add operation and the Change pushbutton option. Then remove the approval node from the operation diagram.
What sets of areas can be disabled on the Self Service Console?
Banner area, Toolbar area, and Footer area
Given the desired services list and organization structure design, which two options are essential to create a service design? (Choose two.)
Define organization requirements.
Gather platform business processes.
Which IBM Tivoli Identity Manager service types are available by default?
DSML identity feed, CSV identity feed, Hosted service
What is the initial logon password for the itim manager user?
In a cluster installation, which option should be used to create the IBM Tivoli Identity Manager V5.1 installation directories?
Directory name must be the same for all cluster members.
Which statement is true when evaluating a placement rule on an identity feed service?
The placement rule returns the organizational container where the identity is to be anchored.
Where can a password policy for a service reside in the organizational chart in relation to its target service?
It can reside in the same business unit that contains the service or above the business unit that contains the service.
Which option would be most appropriate to include in a lifecycle management design?
the requirements for how often to check for inactive accounts
IBM Tivoli Identity Manager (Tivoli Identity Manager) development has released a fix pack to address a specific problem that was found with the reporting module. Which three components, at a minimum, should be backed up? (Choose three.)
Which option Is relevant to gathering requirements and creating an IBM Tivoli Identity Manager (Tivoli Identity Manager) system architecture document?
formulate list of QUESTION NO:s, identify interviewees, identify network topology, and ensure business continuity planning
Which file must be modified to change the background color in the IBM Tivoli Identity Manager V5.1 Self-Service user interface?
What are the correct steps to set up a reconciliation of only supporting data after the service definition has been created and reconciliation was not initially defined?
Existing service definitions are displayed by selecting Manage Services and then searching for the specific service. When the service is listed, selecting the icon next to the name of the service will allow the administrator to set up Reconciliation and specify the Query to Reconcile supporting data only.
Which two options should be included in a custom adapter design document? (Choose two.)
input requirements, installation instructions, prerequisites
process flow diagram, debugging information and log file information
What is the main purpose of the IBM Tivoli Identity Manager recycle bin?
Data subdirectory of Tivoli Identity Manager installation directory
When multiple password policies apply to a service, which option describes how password policy is applied to the service?
The password policy that most specifically targets the service is applied.
What are two means of testing connectivity to the IBM Tivoli Identity Manager LDAP directory? (Choose two.)
Which two log files found under the WAS_HOME/profiles/<profile name>/logs/server1 directory are useful in troubleshooting an IBM Tivoli Identity Manager application problem with a standard installation using WebSphere? (Choose two.)
Which two statements are true when enabling increased trace logging to help determine a problem in IBM Tivoli Identity Manager? (Choose two.)
Set logger trace level=DEBUG_MAX in the file enRoleLogging properties.
Turn on the setting logger trace.logging=true in enRoleLogging properties.
Which test phase should occur first in an IBM Tivoli Identity Manager acceptance plan?
A customer requires additional attributes as per their IBM Tivoli Identity Manager solution design. Which base LDAP objectclass is used to extend the schema to add new attributes to create a custom person class?
A customer is setting up a role-based access control (RBAC) model. Which relationship (between organizational roles and another entity) must be primarily factored in when designing organizational roles?
the relationship between organizational roles and provisioning policies
ITIM .extension .Workflow.gbcUtils=com .ibm .itim .script.extensions .gbcUtilitiesExtension
Which information is stored in a certificate used to secure the connection between IBM Tivoii Identity Manager Server and its adapters?
certificate expiration date
For IBM Tivoli Identity Manager (Tivoli Identity Manager) 5.1 DAML-based adapters, what item relating to reconciliations can be configured using agentCfg?
use of SSL communication with the Tivoli Identity Manager server
Which steps are needed to create an organization structure design from an existing organization and reporting structure?
gather organization structure requirements, discuss alternatives, formalize organization structure, document organization structure
Identification of target platform business processes is essential to which IBM Tivoli Identity Manager configuration task?
Account re certification
New accounts that are reconciled from a remote platform are put up for adoption through the applicable adoption policy, or they are orphaned. What person attribute Is matched against the account eruid attribute by the default global adoption policy in IBM Tivoli Identity Manager V5.1?
the uid attribute
Which two fields are required when an identity policy is defined? (Choose two.)
When migrating IBM Tivoli Identity Manager (Tivoli Identity Manager) from a test to a production environment, which task is valid?
Use the Import/Export feature to migrate the Tivoli Identity Manager configuration.