IBM Security Access Manager V9.0 Deployment — Question 63

The IBM Security Access Manager (ISAM) V9.0 deployment professional is attempting to strike the correct balance between ease of administration/configuration and security, and wants to limit where in the environment security policy can be changed.
On which ISAM component is the Secure Web Settings -> Policy Administration tool automatically disabled?

Answer options

• A. Runtime cluster restricted node
• B. Master External Reference Entity
• C. Distributed Session Cache primary node
• D. Runtime cluster Standby Policy Server node

Correct answer: B

Explanation

The correct answer is B, as the Master External Reference Entity does not allow changes to security policies through the Policy Administration tool for security reasons. The other options, such as the Runtime cluster restricted node, Distributed Session Cache primary node, and Runtime cluster Standby Policy Server node, do not have the same restrictions regarding policy administration.