Free IBM 000-274 Exam Dumps Questions & Answers

A solution implementer is configuring a AAA Policy to secure a DataPower service. Why would the solution implementer configure Mapping Authentication Credentials and Mapping Requested Resources in the DataPower AAA Policy? (choose 2)

• A.To map the authenticated credentials to mediate the security headers of two different protocols (for example from HTTP headers to MQMD).
• B.To map the authenticated credentials from a DN-formatted LDAP response to a username for Tivoli Access Manager(TAM) authorization.
• C.To map the requested resource from a legacy operation name to a new operation name to allow correctauthorization.
• D.To map the authenticated credentials to an alternative security token to insert into the message payload for authorization.
• E.To map the requested resource to the correct backend URL for dynamic message routing.

The network requirements for an appliance state that there should be an internal network used for the management Ethernet interface and all other Ethernet interfaces will use the same external network. With these requirements in mind, how can the solution implementer configure the Ethernet Interfaces to ensure only the specified internal network uses the management interface and all other outgoing traffic uses one of the other interfaces?

• A.Define Static Route for internal network on the management interface and configure the Default Gateway on all other interfaces.
• B.Define Secondary Addresses for the internal network on all interfaces.
• C.Develop a style sheet forcontent based routing that uses host header.
• D.Define Default Gateways on all interfaces with TCP Window Scaling enabled.

Which XML document is valid according to XML specifications?

• A.Option D
• B.Option C
• C.Option B
• D.Option A

A customer wants to protect communication between two WebSphere DataPower Appliances against a replay attack. The second DataPower appliance needs to validate that the message received from the first appliance has spent no more than 30 seconds in transit. How should the solution implementer satisfy this requirement?

• A.Configure mutually authenticated SSL between the two DataPower appliances with an SSL timeout field configured to 30 seconds.
• B.Set the var://service/transaction-timeout variable on the first DataPower appliance to30 seconds.
• C.Use symmetric key encryption using an encrypt-string extension function on a timestamp string on the first DataPower appliance. Then use the public certificate from the first device with a decrypt-string extension function on the second appliance and validate the timestamp.
• D.Use symmetric key encryption using an encrypt-string extension function on a timestamp string on the first DataPower appliance. Then use the same key with a decrypt-string extension function on the second appliance and validate the timestamp.

A solution implementer has created a multi-protocol gateway to pass messages to a backend server. The complete contents of all request messages should be logged; performance is a high priority but the transaction should not fail if the log server is down. Which logging mechanisms should the solution implementer use to satisfy both requirements?

• A.Add a Log action to start of the request rule for the message and setthe Asynchronous option to On.
• B.Add an MQ Log Target for the request message with an Object Filter referencing the service handling the request.
• C.Add an SQL action to the start of the request rule for the message that uses an INSERT statement.
• D.Add an Extract action to the start of the request rule for the message setting the XPath field to "/" toextract the complete request message.