70-573 Q & A / Study Guide / Testing Engine

Best Microsoft MCTS Certification, Microsoft MCITP Training
at certkingdom.com

---

QUESTION 1
A site definition has been purchased from another company. It is used to created SharePoint sites.
Now there is a request to modify the home page for the site definition by adding a Web Part.
What actions need to be taken? Select two.

A. Add..
B. Uninstall..
C. Remove…
D. Modify..
E. Install…
F. ..the file CSTemplate.xsd
G. ..the file Onet.xml
H. ..a Feature receiver
I. ..a Feature dependcy
J. ..the file config.web
K. ..the file web.config

Answer: D,G

Explanation:

---

QUESTION 2
A customized Site Featured need to be made. There is customized site definition.
The Feature of this site definition must be activated for all additional sites which are created using
it.
What actions need to be taken? Select two.

A. Add..
B. Uninstall..
C. Remove…
D. Modify..
E. Install…
F. ..the file CSTemplate.xsd
G. ..the file Onet.xml
H. ..a Feature receiver
I. ..a Feature dependcy
J. ..the file config.web
K. ..the file web.config

Answer: D,G

Explanation:

---

QUESTION 3
There is third party site definition named CertKingdom.
A file named TemplateCertKingdom.xsd is included in CertKingdom.
TemplateCertKingdom.xsd contains configuration date.
There is a provision handler for CertKingdom.
The information in TemplateCertKingdom.xsd must be read.
The following property should be used.



Answer:

---

QUESTION 4
There is a specialized program to import data into SharePoint sites.
There is a specialized site definition named CertKingdom created by MS Visual Studio 2010.
The specialized program code must be run whenever a new site is created by using CertKingdom.
What should be done to ensure this? Select three.

A. Modify..
B. Add…
C. Delete…
D. ..file..
E. ..class..
F. ..feature..
G. .. CSTemplate.xsd
H. ..SPItemEventReceiver
I. .. Onet.xml
J. .. receiver
K. .. SPChangeFile
L. .. SPWebEventReceiver
M. .. dependcy
N. .. SPWebProvisioningProvider
O. ..config.web
P. .. web.config

Answer: B,E,N

Explanation:

---

QUESTION 5
There is a specialized Web Part named CertKingdomWebpart.
There must be a test to check if CertKingdomWebpart generates leaks in the RAM.
What should be done to ensure this? Select two.

A. Modify..
B. Add…
C. Run..
D. Delete…
E. .. WinDbg.exe
F. .. CSTemplate.xsd
G. ..SPItemEventReceiver
H. .. Onet.xml
I. .. SPDisposeCheck.exe
J. .. SPChangeFile
K. .. SPWebEventReceiver
L. .. SPMetal.exe
M. .. SPWebProvisioningProvider
N. ..config.web
O. .. web.config

Answer: C,I

Explanation:

---

Best Microsoft MCTS Certification, Microsoft MCITP Training
at certkingdom.com

Google patches rare critical vulnerability in Chrome

Sandbox escape vulnerability disclosed at CanSecWest was patched in Chrome 17.0.963.78

Google has patched a critical Chrome vulnerability disclosed Wednesday at the CanSecWest security conference in Vancouver that can be exploited to escape from a browser's secure sandbox.

Russian security researcher Sergey Glazunov demonstrated a remote code-execution (RCE) exploit against a fully patched version of Chrome on Windows 7 as part of Google's Pwnium contest held at the conference.

Best Microsoft MCTS Certification, Microsoft MCITP Training at certkingdom.com

BACKGROUND: Contests hack the heck out of Chrome

Glazunov's exploit leveraged two Chrome vulnerabilities -- one that allows the execution of arbitrary code and one that bypasses the browser's much-touted security sandbox, which normally restricts such exploits.

Remote code-execution vulnerabilities, while very serious, are relatively common in all software products. However, the sandbox escape ones are extremely rare and, according to TippingPoint, which runs the separate Pwn2Own contest at CanSecWest, are worth much more than the US$60,000 Glazunov earned from Google for reporting it.

Both vulnerabilities leveraged by Glazunov's exploit were fixed in Google Chrome 17.0.963.78, which was released on Thursday.

"We had the first successful exploit at Pwnium yesterday, and today we've already rolling out an update to protect our users," said Sundar Pichai, Google's senior vice president for Chrome, on Thursday via his Google+ account. "The team took less than 24 hours from initial report to verification to fix development to getting a fix out."

Because of the Chrome's auto-update feature, users just need to restart their browsers in order to deploy the security fix. Organizations can deploy the important update by using the Google Update for enterprise policy.

Glazunov's was not the only Chrome sandbox escape exploit demoed at CanSecWest. A team of researchers from French security vendor VUPEN presented a similar attack as part of TippingPoint' Pwn2Own contest.

However, the Pwn2Own rules don't require researchers to disclose sandbox-escape vulnerabilities to vendors, primarily because the prize money wouldn't justify their disclosure. This means that there is still one highly critical Chrome vulnerability out there that remains unpatched.

The Chrome security team suspects that it's located in the Flash Player plug-in bundled with the browser by default and not in Chrome's own code. There is no confirmation from VUPEN regarding this theory, but if true, the task of patching the vulnerability would fall with Adobe Systems.

000-020 Q&A / Study Guide / Testing Engine

Best IBM Certification Training and IBM Exams Training and more IBM exams log in to Certkingdom.com

---

QUESTION 1
An organization has decided to deploy an IBM Tivoli Access Manager for Enterprise Single-on
solution to help address security and productivity issues. Per their corporate security policy, the
organization has detailed requirements related to password management for their enterprise
applications. Which password requirements need to be captured?

A. details related to application user ID requirements
B. policy requirements related to the number of applications that a user can access
C. policy requirements for application and user initiated password resets and password complexity
D. do nothing as password policy requirements are best addressed within the application space
rather than in an Enterprise Single Sign-On project

Answer: C

---

QUESTION 2
Which operator allows specification of a case-sensitive regular expression comparison for
attributes in an AccessProfile signature?

A. Tilde (~)
B. Hash (#)
C. Equals (=)
D. Asterisk (*)

Answer: A

---

QUESTION 3
What are the directory details of Relational Database backup files created by IBM Tivoli Access
Manager for Enterprise Single Sign-On V8.0.1 housekeeping?

A. The directory must exist with one subdirectory (general).
B. The directory must exist with two subdirectories (daily, weekly).
C. The directory must exist with three subdirectories (daily, weekly, monthly).
D. The directory must exist with four subdirectories (general, daily, weekly, monthly).

Answer: C

---

QUESTION 4
System, machine, and user policies can be configured though AccessAdmin. How are changes
synchronized with the AccessAgent?

A. written by the Administrators on the INI files
B. propagated only with the Active Directory network service
C. propagated to the clients on the next Administrator access
D. propagated to clients the next timeAccessAgent synchronizes with the IMS Server

Answer: D

---

QUESTION 5
An SSL VPN can be used in conjunction with IBM Tivoli Access Manager for Enterprise Single
Sign-On to provide remote access to business critical information. Which statement is true about
the Mobile ActiveCode (MAC) when it is used with a VPN Solution for remote access?

A. The MAC can only be delivered to a mobile phone and is good for a single use only.
B. The MAC can be delivered by mobile phone, e-mail, or fax, and it is good for one time
authentication only.
C. The MAC can only be delivered to a mobile phone and it is good until the expiration time is
reached, as set by an administrator.
D. The MAC can be delivered by mobile phone, email, or fax, and it is good until the expiration
time is reached, as set by an administrator.

Answer: B

---

Best IBM Certification Training and IBM Exams Training and more IBM exams log in to Certkingdom.com