IBM Security Access Manager V9.0 Deployment — Question 29

In a Web Commerce environment, a "/shoppingcart" junction with four back-end application servers is created on the IBM Security Access Manager V9.0 Web
Reverse Proxy. The back-end servers are not using session replication.
Which action is appropriate for maintaining session state when creating the junction?

Answer options

• A. Create a WebSEAL-to WebSEAL_junction
• B. Configure the junction so that the "least-busy" algorithm
• C. Configure the junction so that it is configured to be a stateful junction
• D. Configure the junction to insert user session data "user_session_id" into the HTTP headers

Correct answer: D

Explanation

The correct answer is D because inserting the 'user_session_id' into the HTTP headers allows the front-end to maintain the session state across multiple back-end servers without session replication. Options A and B do not directly address session state management, while C might suggest maintaining state, but it is not applicable without session replication.