CAT-340 - CA IdentityMinder r12.x Professional Exam
Go back to CA-Technologies
Which statement about the Provisioning Server is TRUE?
It manages accounts on end point systems.
You are using CA SiteMJnder and CA IdentityMinder in an integrated environment. To configure directory mapping in the CA SiteMinder Policy Server, which steps do you need to perform? (Choose three)
Add a response attribute named sm_userdn for the SMJJSERNAME attribute.
Add the authentication directory to the CA IdentityMinder environment domain.
In the CA IdentityMinder environment realm, map the authorization directory to the authentication directory.
Which issue might be resolved by turning off Event Correlation System (ECS) logging above the INFO level?
Poor Provisioning Server performance
Which statement about capability attributes is TRUE?
They represent account information such as storage size, quantity, frequency limits, or group memberships.
CA IdentityMinder must integrate with CA SiteMinder in order to:
add multiple regular expressions to a single password policy.
Which statement about installing Connector Xpress is TRUE?
It can be installed on a dedicated computer.
In CA IdentityMinder r12.6, the basic access request feature:
can use workflow approval and email notification functionality.
Forward Inc. is an international logistics company with headquarters in the United Kingdom. You need to decide how best to implement CA IdentityMinder for this company. You have ascertained that the solution will need to support approximately 500,000 accounts. Which installation type should you use?
In CA IdentityMinder, which self-service actions can you perform using public tasks? (Choose two)
Resetting a forgotten password
Which statement about CA Identity Minder end points is TRUE?
A specific type of endpoint needs to be enabled on the Provisioning Server to enable CA Id entity Minder to communicate to it.
When you build the CA IdentityMinder environment, you can configure support for public tasks. To do this, you specify a:
URL alias and a user.
When you export CA IdentityMinder environment settings, you generate a ZIP file containing which files? (Choose three)
You have deployed CA IdentityMinder with a CA SiteMinder Policy Server. During the second day of testing your installation, you receive a "Not Loaded" error message when you attempt to log in. You check that the User Store is running. Which other action should you take to investigate this issue?
Verify that CA SiteMinder can connect to the User Store.
Which tasks does Config Xpress enable you to perform? (Choose three)
Move components between environments.
Publish a report of thesystem components to a PDF file.
Publish the XML configuration fora particular component.
At Forward Inc., workflow approval is required whenever a user is added to the HR group. Which API specifies the list of users who are authorized to approve or reject a workflow?
Participant Resolver API
Which statement about Policy Xpress is TRUE?
By default, Policy Xpress tasks are associated with the Policy Xpress Manager and System Manager roles.
Which statement about synchronizing CA IdentityMinder and provisioned users is TRUE?
Account synchronization updates capability attributes to help ensure that the account has the capabilities specified by the account template.
Which ETAUTIL error appears when the authentication to the Provisioning Server fails?
Unknown error nnn opening Common Object Repository
During the installation, CA Identity Minder creates several database schemas. Later, to provide scalability, you can create a separate database to replace any one of these, Use the CreateDatabase script to set up a new:
Workflow database instance.
When you configure a WorkPoint manual activity, you can specify multiple Participant Resolvers, Using an order of precedence, CA Identity Minder identifies and applies the first resolver and ignores any subsequent resolvers. To select the resolver, which order of precedence does CA IdentityMinder follow? 1. Role 2. Filter 3. Group 4. Custom
Which statement about Task Execution Web Services (TEWS) is TRUE?
Its interface is slower than the native web interface due to XML parsing.
What do you need to do before you create a report for a Connector Xpress custom endpoint?
Enable reporting for the custom endpoint.
Before you install the Connector Server, what should you do? (Choose two)
Make sure that the time settings on all computers that will hold Connector Servers match.
Make sure that prerequisite packages are installed inthe correct order on Red Hat 6.x systems.
Forward Inc. is an international logistics company with headquarters in the United Kingdom. Forward Inc. has asked you to demonstrate how CA IdentityMinder supports account provisioning. In the CA IdentityMinder configuration that you will use for your demonstration, which component is optional?
SiteMinder Policy Server
The role model in CA GovernanceMinder can be dynamically updated whenever changes are made in CA Identity Minder using:
Which event context information object method returns the name of the person who submitted the task that generated an event?
Which step do you need to perform to configure email server settings for the JBoss application server?
Modify the mail-service.xml file.
Which task do you perform using the CA IdentityMinder Management Console?
Create and manage the Provisioning Directory.
For workflow installation, many steps that were previously manual are now performed automatically by the installer. Nonetheless, you still need to use the Management Console to:
enable workflow for your CA IdentityMinder environment.
You are deploying CA IdentityMinder on a 64-bit Windows system. Before you configure Active Directory password synchronization, you want to make sure that you meet the twin goals of maximizing security and minimizing synchronization issues. Which guideline should you follow?
Make sure that the CA IdentityMinder password policy is stricter than the password policy of the endpoints.
In an email template, what is the purpose of the <% %> tag?
You need to import a large number of managed users to the CA Identity Minder User Store simultaneously. Having explored the various options, the Bulk Loader method seems the best option. However, which limitation do you need to be aware of before you begin?
It may use large amounts of memory.
Because of a recent acquisition by Forward Inc., which will add 1800 new users to the system, you decide to use the Bulk Loader to feed the information to CA IdentityMinder, You will need to prepare a file for the Bulk Loader, containing the relevant details. Which Bulk Loader input file guidelines do you need to follow? (Choose three)
A field representing the action is mandatory.
Each file must describe a single managed object type.
Attribute names should be the physical or well-known names of the managed objects.
You are installing CA Identity Minder on a Windows Server 2008 R2 64-bit system. You have encountered a number of errors and need to quickly find the information you need to address problems. Which action should you take?
Forward Inc. has renamed several departments. You want to use a Bulk Task to reflect these changes. How do Bulk Tasks differ from the scheduled task functionality that CA Identity Minder provides?
They provide population filters.
Security Administrator, Zhi Wang, creates the CA Identity Minder roles required to implement delegated administration. Two weeks later, one of these new roles requires some changes. These changes should be performed by the:
Which statement about installing the Report Server is TRUE?
If JBoss is already installed on the computer on which you are installing the Report Server, port conflicts can occur.
You are setting up the Bulk Load Client to perform a complete dump of all HR users into CA IdentityMinder. You want to avoid a problem you encountered previously when a large number of records processed overloaded the server. Which command-line option addresses this issue?
imbulkloadclient -b, --batchSize <number>
When you configure the Report Server, which guideline should you follow?
Set all systems involved in reportingto the same time zone and time.
Which ETAUTIL control statement is used to set the same attribute values for a set of objects?
You want to configure password synchronization with UNIX systems. Which component enables CA Identity Minder to authenticate passwords against external security systems?
Pluggable Authentication Module (PAM)
Which two components communicate using a Connector?
Provisioning Server and endpoint
To help ensure role granularity, when you create provisioning roles, which guideline should you follow?
Every role should have at least one user.
You need to create a CA Identity Manager directory for an LDAP User Store. After you determine the directory structure that you need to use, which file do you modify to describe the objects in the User Store?
Which optional component of the CA IdentityMinder architecture provides advanced authentication?
SiteMinder Policy Server
You are implementing CA IdentityMinder at Forward Inc., an international logistics company with headquarters in the United Kingdom. At Forward Inc., a single managed endpoint containing every person does not exist. However all users are contained in a payroll database, which can become the source of the global users for the provisioning directory. In this context, the payroll database is known as a:
You are configuring a primary approver for a task using the process template method. Which types of Participant Resolver can you assign? (Choose two)
During Exchange Agent configuration, which step do you perform?
Configure CAFTHOST to recognize the C++ Connector Server (CCS) and the CA IdentityMinder clients.
Which statement about using Active Directory password synchronization with CA IdentityMinder is TRUE?
The Password Synchronization Agent must be installed on the system on which password changes areto be intercepted.
Which features characterize CA Identity Minder? (Choose three)
Assignment of privileges through roles
Delegation of the management of users and application access
Self-service options that enable users to manage their own accounts