A customer wants to protect communication between two WebSphere DataPower Appliances against a replay attack. The second DataPower appliance needs to validate that the message received from the first appliance has spent no more than 30 seconds in transit. How should the solution implementer satisfy this requirement?

• A. Set the var://service/transaction-timeout variable on the first DataPower appliance to30 seconds.
• B. Use symmetric key encryption using an encrypt-string extension function on a timestamp string on the first DataPower appliance. Then use the same key with a decrypt-string extension function on the second appliance and validate the timestamp.
• C. Use symmetric key encryption using an encrypt-string extension function on a timestamp string on the first DataPower appliance. Then use the public certificate from the first device with a decrypt-string extension function on the second appliance and validate the timestamp.
• D. Configure mutually authenticated SSL between the two DataPower appliances with an SSL timeout field configured to 30 seconds.

The solution implementer needs to configure the DataPower appliance to restrict user account access to specific domains. The solution implementer implements this requirement by configuring the Domain Restriction section of the user account. During application execution, the configured user account is able to access a domain that is configured as restricted (no access allowed by this user). What should the solution implementer identify as a valid source of the problem?

• A. The RBM system was not used to restrict access, which is the only way to meet the Domain Restriction requirement.
• B. User access cannot be restricted to a specific domain in the user account configuration.
• C. An existing access policy or RBM policy can supersede the Domain Restriction list.
• D. The user is a member of the 'root' user group.

A solution implementer has created a multi-protocol gateway (MPGW) service to process messages containing theMQRFH2 header. The MQ front side handler is configured to exclude "MQRFH2" headers from the payload. How does the solution implementer configure the MPGW service Header tab to send the request as an MQ message for the backend service?

• A. Suppress "MQMD"header for the backend with a direction as "back".
• B. Inject the header named "MQMD" with the value of "<MQMD><Format>MQSTR</Format></MQMD>" for the backend with a direction as "back".
• C. Inject the header named "MQMD" with the value of "<MQMD><Format>MQSTR</Format></MQMD>" for the backend with a direction as "front".
• D. Suppress "MQRFH2" header for the backend with a direction as "back".

A solution implementer has created a Deployment Policy to scan through configuration objects when they are imported and to remove any references to appliance specific settings such as the Ethernet addresses. Which of the following Deployment Policy settings would provide this functionality? (choose two)

• A. A Filtered Configuration with a list of the objects that are to be excluded.
• B. An Accepted Configuration with a list of the correct values for the properties forany named objects that will be updated during import.
• C. A Modified Configuration with rules specifying Delete Configuration for the object references to be removed on import.
• D. A Rejected Configuration with a list ofthe objects that must be rejected during import.
• E. A Filtered Configuration with a list of the objects that are to be included.

A Client sends a message to a multi-protocol gateway which uses HTTP basic authentication to authenticate the Client by usingLDAP. The parameters and transaction flow information is provided below:

How is the Client authenticated?

• A. The HTTP basic authentication is used with the DataPower XML authentication file. The output credentials are used to authenticate the LDAP directory server.
• B. The LDAP bind DN and password are used to authenticate the appliance to the directory service and the Client's user name and password are used to build the LDAP credentials to authenticate the Client.
• C. The password that is sent by the Client using the HTTP basic authentication header is a critical part of the LDAPquery and is used for the genPassword() algorithm for Client bind LDAP authentication.
• D. The user name and password part of the HTTP basic authentication message are used to log in (bind) to the LDAP server.