Deck 1: CA Identity Manager r12.x Professional

Question 1

Which ETAUTIL error appears when the authentication to the Provisioning Server fails?

A) Object 'XXXX' operation failed
B) Class 'classname' is not a valid class name
C) End of file reached while expecting an operator
D) Unknown error nnn opening Common Object Repository

Answer 1

D

Question 2

When you build the CA IdentityMinder environment, you can configure support for public tasks. To do this, you specify a:

A) group and a name.
B) URL alias and a user.
C) directory and a task list.
D) role definition file and a default role.

Answer 2

B

Question 3

To help ensure role granularity, when you create provisioning roles, which guideline should you follow?

A) Every role should have at least one user.
B) Account templates should be assigned to individual users rather than to roles.
C) Depending on the size of an organization, a role should have between 50 and 200 users.
D) For most organizations, 50 percent of user access is from permanent roles and 50 percent is from temporary roles.

Answer 3

A

Question 4

Forward Inc. is an international logistics company with headquarters in the United Kingdom. Forward Inc. has asked you to demonstrate how CA IdentityMinder supports account provisioning. In the CA IdentityMinder configuration that you will use for your demonstration, which component is optional?

A) Provisioning Server
B) Provisioning Directory
C) IdentityMinder Server
D) SiteMinder Policy Server

Question 5

When you export CA IdentityMinder environment settings, you generate a ZIP file containing which files? (Choose three)

A) alias_environment.xml
B) alias_environment_roles.xml
C) alias_environment_users.xml
D) alias_environment_settings.xml
E) alias_environment_mappings.xml

Question 6

Which statement about installing Connector Xpress is TRUE?

A) It can be installed on a dedicated computer.
B) It must be installed on the Report Server computer.
C) It must be installed on the Provisioning Server computer.
D) It must be installed on the Java Connector Server (JCS) computer.

Question 7

You are implementing CA IdentityMinder at Forward Inc., an international logistics company with headquarters in the United Kingdom. At Forward Inc., a single managed endpoint containing every person does not exist. However all users are contained in a payroll database, which can become the source of the global users for the provisioning directory. In this context, the payroll database is known as a:

A) corporate store.
B) primary endpoint.
C) secondary endpoint.
D) operational database.

Question 8

Which two components communicate using a Connector?

A) Provisioning Server and endpoint
B) Policy Server and Report Server
C) User Store and Provisioning directory
D) Report Server and Snapshot Database

Question 9

You need to create a CA Identity Manager directory for an LDAP User Store. After you determine the directory structure that you need to use, which file do you modify to describe the objects in the User Store?

A) users.xml
B) config.xml
C) import.xslt
D) directory.xml

Question 10

Which optional component of the CA IdentityMinder architecture provides advanced authentication?

A) Connector Server
B) Provisioning Server
C) Resource Proxy Server
D) SiteMinder Policy Server

Question 11

Which task do you perform using the CA IdentityMinder Management Console?

A) Manage the Provisioning Server.
B) Customize default roles and tasks.
C) Create and manage the Provisioning Directory.
D) Create an agent that CA SiteMinder can communicate with.

Question 12

Which ETAUTIL control statement is used to set the same attribute values for a set of objects?

A) MASSCHANGE
B) EXPLORE
C) UPDATE
D) DELETE

Question 13

Which statement about capability attributes is TRUE?

A) They represent information initially set for an account.
B) They are internal read-only Provisioning Server attributes.
C) They are italicized on account property sheets for easy identification.
D) They represent account information such as storage size, quantity, frequency limits, or group memberships.

Question 14

You are installing CA Identity Minder on a Windows Server 2008 R2 64-bit system. You have encountered a number of errors and need to quickly find the information you need to address problems. Which action should you take?

A) Run run_idm.sh.
B) Check caiamsuite.log.
C) Run BIConfig and examine the output.
D) Check im-installer.properties for Connector errors.

Question 15

At Forward Inc., workflow approval is required whenever a user is added to the HR group. Which API specifies the list of users who are authorized to approve or reject a workflow?

A) Workflow API
B) Event Listener API
C) Participant Resolver API
D) Business Logic Task Handler API

Question 16

You are using CA SiteMJnder and CA IdentityMinder in an integrated environment. To configure directory mapping in the CA SiteMinder Policy Server, which steps do you need to perform? (Choose three)

A) Create a Table element for each attribute.
B) Add a response attribute named sm_userdn for the SMJJSERNAME attribute.
C) Add the authentication directory to the CA IdentityMinder environment domain.
D) Use the Reference element for a secondary table to define its relationship to the primary table.
E) In the CA IdentityMinder environment realm, map the authorization directory to the authentication directory.

Question 17

Forward Inc. has renamed several departments. You want to use a Bulk Task to reflect these changes. How do Bulk Tasks differ from the scheduled task functionality that CA Identity Minder provides?

A) The initiator is JInitiator.
B) They are never scheduled.
C) They provide population filters.
D) They do not permit multi-valued attributes.

Question 18

The role model in CA GovernanceMinder can be dynamically updated whenever changes are made in CA Identity Minder using:

A) Smart Provisioning.
B) Role Engineering.
C) Reverse Synchronization.
D) Provisioning Synchronization Management.

Question 19

During Exchange Agent configuration, which step do you perform?

A) Install an Exchange server remote agent on the Provisioning Server.
B) Configure the CAM and CAFT Service to be started by the system account.
C) Configure inbound mappings to map Exchange events to CA IdentityMinder tasks.
D) Configure CAFTHOST to recognize the C++ Connector Server (CCS) and the CA IdentityMinder clients.

Question 20

When you configure the Report Server, which guideline should you follow?

A) Always restart the environment after you configure reporting.
B) Set all systems involved in reporting to the same time zone and time.
C) To avoid port conflicts with JBoss, change the default port numbers in the CRConfig.xml file.
D) Configure the connection with the Provisioning Server before you configure the connection with the Snapshot Database.

Question 21

CA IdentityMinder must integrate with CA SiteMinder in order to:

A) automatically remove white space in passwords.
B) add multiple regular expressions to a single password policy.
C) prevent passwords that are all numeric using a regular expression.
D) specify the maximum number of repeated characters in a password.

Question 22

Which statement about Policy Xpress is TRUE?

A) All Policy Xpress actions generate CA IdentityMinder events.
B) It is a design tool only and plays no role in the operation of policies.
C) By default, Policy Xpress tasks are associated with the Policy Xpress Manager and System Manager roles.
D) When a policy completes, Policy Xpress saves information about the policy that ran on the user object only if the policy made changes.

Question 23

Before you install the Connector Server, what should you do? (Choose two)

A) Check that the Java Virtual Machine is already installed.
B) Make sure that the time settings on all computers that will hold Connector Servers match.
C) Make sure that prerequisite packages are installed in the correct order on Red Hat 6.x systems.
D) Check that the computer already contains either the Provisioning Server or the CA IdentityMinder Server.

Question 24

You are configuring a primary approver for a task using the process template method. Which types of Participant Resolver can you assign? (Choose two)

A) Null Resolver
B) Default Resolver
C) Dynamic Resolver
D) Role Manager Resolver

Question 25

Forward Inc. is an international logistics company with headquarters in the United Kingdom. You need to decide how best to implement CA IdentityMinder for this company. You have ascertained that the solution will need to support approximately 500,000 accounts. Which installation type should you use?

A) Basic
B) Intermediate
C) Large Enterprise
D) Demonstration/compact

Question 26

You are deploying CA IdentityMinder on a 64-bit Windows system. Before you configure Active Directory password synchronization, you want to make sure that you meet the twin goals of maximizing security and minimizing synchronization issues. Which guideline should you follow?

A) Configure CA IdentityMinder to check the history of recent changes to passwords.
B) Enable CA SiteMinder rules to override rules in other accounts by configuring eta_pwdsync.conf.
C) Make sure that the CA IdentityMinder password policy is stricter than the password policy of the endpoints.
D) Use the 32-bit Password Synchronization Agent on 64-bit systems that require Federal Information Processing Standards (FEPS).

Question 27

You need to import a large number of managed users to the CA Identity Minder User Store simultaneously. Having explored the various options, the Bulk Loader method seems the best option. However, which limitation do you need to be aware of before you begin?

A) It may use large amounts of memory.
B) It cannot be mapped to a workflow process.
C) It does not support the execution of identity policies.
D) It bypasses audit and security mechanisms provided by the Task Server.

Question 28

Which statement about synchronizing CA IdentityMinder and provisioned users is TRUE?

A) User synchronization includes account synchronization by default.
B) Inbound synchronization is configured and enabled on the CA IdentityMinder Server only.
C) Account synchronization updates capability attributes to help ensure that the account has the capabilities specified by the account template.
D) Strong synchronization helps ensure that global users have the minimum capability attributes that their accounts should possess and is the default for most endpoint types.

Question 29

Which statement about installing the Report Server is TRUE?

A) The root account must be used for UNIX installations.
B) The mergeconnection_3.0.reg script must be run for 64-bit systems.
C) If a report-installation checklist is used, the installation should take no longer than 15 minutes.
D) If JBoss is already installed on the computer on which you are installing the Report Server, port conflicts can occur.

Question 30

Which event context information object method returns the name of the person who submitted the task that generated an event?

A) getOrgName()
B) getEventName()
C) getAdminName()
D) getPrimaryObjectName()