IBM WebSphere DataPower SOA Appliances Firmware V5.0 Solution Implementation Sample Questions:

1. When establishing server-side SSL authentication for an SSL connection, which one of the following sequence is used to establish a successful connection?

A) Option B
B) Option C
C) Option A
D) Option D

2. A Client sends a message to a multi-protocol gateway which uses HTTP basic authentication to authenticate the Client by usingLDAP. The parameters and transaction flow information is provided below:

How is the Client authenticated?

A) The user name and password part of the HTTP basic authentication message are used to log in (bind) to the LDAP server.
B) The password that is sent by the Client using the HTTP basic authentication header is a critical part of the LDAPquery and is used for the genPassword() algorithm for Client bind LDAP authentication.
C) The HTTP basic authentication is used with the DataPower XML authentication file. The output credentials are used to authenticate the LDAP directory server.
D) The LDAP bind DN and password are used to authenticate the appliance to the directory service and the Client's user name and password are used to build the LDAP credentials to authenticate the Client.

3. A solution implementer needs to integrate the following security profile.

What must the solution implementer do to a message to satisfy this policy?

A) Encrypt the body and header. Sign BOTH body and header.
B) Encrypt the body, sign the message and usean X.509 Token.
C) Encrypt the body, sign the Parts, and use an UsernameToken.
D) Encrypt and sign the body of the message.

4. A solution implementer is tasked to use a DataPower appliance as an intermediary for providing Web 2.0 services. Which of the following features of Web 2.0 messages should the solution implementer be aware of when designing thesolution? (choose two)

A) Web 2.0 message and a SOAP message cannot be processed by the same processing policy and front side handler of a DataPower Service.
B) Web 2.0 use cases are best suited for a web service proxy service.
C) Web 2.0 messages can arrive with an empty body.
D) Web 2.0 REST messages can use HTTP POST methods like SOAP messages.
E) Web 2.0 messages can be secured by WS-Security.

5. When debugging an SSL handshake using a packet capture, it is observed that there is a Client HELLO message followed by a Server HELLO message. Each of those packets have an associated Session ID that is different fromeach other. What does this indicate to the solution implementer?

A) A resumed SSL session and a shorter SSL handshake will be performed.
B) The server is not ready to do session caching.
C) A new SSL session and a full handshake will be performed.
D) The SSL handshake is not required because of session caching.

Solutions: