CAT-140 Online Practice Questions and Answers

Which guideline applies when using a custom login page?

A. Ensure the login page is protected.

B. Use the GET rather than the POST method.

C. Place the target page in an unprotected directory.

D. Use an unprotected stub login page to reach the protected login page.

A benefit of the Credential Selector is that it enables:

A. users to choose different types of authentication credentials

B. temporary credentials to be assigned to users who log on anonymously

C. CA SiteMinder to authenticate users against one directory and authorize users against a separate directory

D. the Web Agent to compare the IP address stored in a cookie from the last request with the IP address in the current request to see if theymatch

In your company, authentication information is stored in a central Oracle repository. However, authorization information is spread across several different SQL Server and Oracle user directories associated with specific applications. The Social Security Number (SSN) of employees is common to all user directories. You are likely to use Lightweight Directory Access Protocol (IDAP) directories in the near future. Which statement about CA SiteMinder directory mapping options is TRUE?

A. It is best to use the identical DN method to mapIDAP directories to the central Oracle repository.

B. When mapping relational database directories to each other, Universal ID is the only method available.

C. When mappingIDAP user directories to the central Oracle repository, Universal ID is the only method available.

D. You can choose between the Universal ID and Identical DN methods when mapping relational databases with the central Oracle repository for authentication.

To fully utilize CA SiteMinder password services, what do you need to utilize in the user directory store?

A. Replication

B. A read only account

C. Access Control Lists (ACLs)

D. An administrator account with read/write capabilities

To configure local configuration for a Web Agent, you use AllowLocalConfig = yes. Where do you set this parameter?

A. In the Host Configuration File

B. In the Agent Configuration File

C. In the Hosts file on the web server

D. In the local configuration file on the system hosting the web server

Which features characterize the J2EE application server agent? (Choose two)

A. Supports IBM WebSphere and BEA WebLogic

B. Protects J2EE application server-based applications

C. Moves the point of trust from the web server to the ERP/CRM server

D. Makes calls to the Event Manager when authentication credentials are provided

The SMAUTHREASON parameter hoIDs the reason code associated with a login failure. What does SMAUTHREASON=7 signify?

A. User disabled

B. Unknown user

C. Password Expired

D. Password must change

What does the Agent User Cache store?

A. Encrypted session tickets

B. Template data of .fee files

C. Information about recently accessed resources

D. Results of Lightweight Directory Access Protocol Directory (IDAP) searches

You need to test and demonstrate the use of IP checking to show how you can prevent someone from stealing a cookie and using that cookie to access a system. You have chosen not to enable PersistentCookies. Which parameter shouID you set to Yes?

A. TransientIPCheck

B. PersistentIPCheck

C. SMIdentityIPCheck

D. SMSessionIPCheck

The Active Directory Global Catalog feature is useful in a multi-domain forest where it provides a central repository of domain information for the forest by storing partial replicas of all domain directory partitions. When integrating Active Directory with CA SiteMinder, which Global Catalog- related limitation do you need to consider?

A. Load balancing and failover are not supported when you use Global Catalog.

B. Password Services is not supported because Global Catalog does not support writes.

C. A Policy Server cannot communicate with an Active Directory Global Catalog User Store.

D. A Policy Server can communicate with an Active Directory Global Catalog User Store but cannot operate in Federal Information Processing Standards (FTPS) mode.