IBM WebSphere DataPower SOA Appliances Firmware V5.0 Solution Implementation

QUESTION NO: 1
A company-wide Certificate Authority (CA) provides its internal CA root and intermediary certificates to the solution implementer to use for the creation of Validation Credentials that validates several back end servers using SSL. The two lines of business in the company provide services on two different domains on DataPower and two different banks of servers on the back end. The requirement is to share a single copy of the CA certificates to create validation credentials in two domains for both the lines of business to simplify maintenance. How can the solution implementer satisfy the requirement?

A. Store the certificatein the cert: folder in any of the two domains and mark the certificate as shared. B. Create Validation Credentials in the default domain so it can be shared across all the domains. C. Store the CA certificates in the sharedcert: folder from the default domain. D. Store the CA certificates in the store:///cert folder from the default domain.

Correct Answer: C

QUESTION NO: 2
A solution implementer is given the requirement to capture only a subset of messages emitted by a particular service to its own custom logging target. The solution implementer uses an <xsl:message> statement in the style sheet referenced by the transformation actions. How does the solution implementer meet this requirement?

A. Define a new event filter, use it in the <xsl:message> statement and define a log target that subscribes to that event filter. B. Define an object filter, use it in the <xsl:message> statement and define a log target that uses that object filter. C. Define a new log target and an object filter which filters messages based on the name of the DataPower service hosting the application. D. Define a log category, use it in the <xsl:message> statement and define a log target that subscribes to that event category.

Correct Answer: D

QUESTION NO: 3
A solution implementer is tasked with securing a backend web service by creating an externally advertised web service interface that will: ?easilyadapt to any backend changes. ?conform to the backend service Web Service Description Language (WSDL) document. ?monitor and control message traffic based on consumer and requested resources to the WSDL operation level. What DataPower service should the solution implementer configure to satisfy these requirements?

A. Web service proxy using the WSDL with a dynamic backend. B. Loopback XML firewall with a user agent subscribed to a WSDL. C. Web application firewall with operations imported directly from the WSDL. D. Multi-protocol gateway using a WSDL with a sign/verifyactions.

Correct Answer: A

QUESTION NO: 4
A customer wants to protect communication between two WebSphere DataPower Appliances against a replay attack. The second DataPower appliance needs to validate that the message received from the first appliance has spent no more than 30 seconds in transit. How should the solution implementer satisfy this requirement?

A. Set the var://service/transaction-timeout variable on the first DataPower appliance to30 seconds. B. Configure mutually authenticated SSL between the two DataPower appliances with an SSL timeout field configured to 30 seconds. C. Use symmetric key encryption using an encrypt-string extension function on a timestamp string on the first DataPower appliance. Then use the same key with a decrypt-string extension function on the second appliance and validate the timestamp. D. Use symmetric key encryption using an encrypt-string extension function on a timestamp string on the first DataPower appliance. Then use the public certificate from the first device with a decrypt-string extension function on the second appliance and validate the timestamp.

Correct Answer: C

QUESTION NO: 5
A solution implementer has been taskedwith monitoring a service and filtering requests based on how long an external backend service takes to respond. The solution implementer has chosen to use the message duration monitor in the DataPower service.
Which "measure" value must the solution implementer configure to satisfy this requirement?

A. Responses B. Requests C. Server D. Messages

Correct Answer: C

QUESTION NO: 6
In the Configured Rules section of the Policy Editor, two request rules are listed, Rule_One, followed by Rule_Two, and both use the same matching rule.

What occurs when a message that satisfies the matching rule is received?

A. Rule_One will be executed, followed by Rule_Two, since all rules that satisfy the match are executed. B. The policy will not be applied, since the Policy Editor will not allow a configuration of rules that have the same match. C. This policy will fail during execution, since it cannot be determined which rule should be executed. D. Only Rule_One will beexecuted since it is the first rule that matches the request.

Correct Answer: D

QUESTION NO: 7
A solution implementer is debugging a web service proxy which communicates with a backend service http://server1:9092/myserv. The irregular performance to the backend service cannot be explained so a packet capture is run to dig deeper into the issue. The results need to be stored in a file called packet-capture. Also, the solution implementer wants to capture data only related to the specific backend service host and across all interfaces. What CLI syntax should the solution implementer use and how can the packet capture be analyzed?

A. packet-capture temporary:///packet-capture -1 10000 9000 "host server1" and analyze using any 'pcap' compliant application, such as 'tcpdump' or 'Wireshark'. B. packet-capture-advanced all temporary:///packet-capture -1 10000 9000 "host server1" and analyze the packet capture using the Troubleshooting section in the DataPower WebGUI. C. packet-capture temporary:///packet-capture -1 10000 9000 and analyze using any text editor or word processor D. packet-capture-advanced all temporary:///packet-capture -1 10000 9000 "host server1" and analyze using any 'pcap' compliant application, such as 'tcpdump' or 'Wireshark'.

Correct Answer: D

QUESTION NO: 8
A solution implementer needs to integrate a DataPower appliance with an IMS COBOL application. The multi-protocol gateway is created with an HTTP Front Side Handler and an IMS Connect backside URL of the form dpims://. The EBCDIC HeaderConversion is configured as "on" in the IMS Connect object. What benefit(s) can the solution implementer achieve by using this Header Conversion option?

A. Converts IMS headers to ASCII encoding B. Converts IMS headers to EBCDIC encoding C. Converts bothIMS headers and payload to ASCII encoding D. Converts both IMS headers and payload to EBCDIC encoding

Correct Answer: B

IBM WebSphere DataPower SOA Appliances Firmware V5.0 Solution Implementation - C2180-274 Exam Questions