Tag: 70-158 VCE

Vendor: Microsoft
Exam Code: 70-158
Exam Name: Forefront Identity Manager 2010, Configuring
Version: 14.91

QUESTION 81
You administer a Forefront Identity Management (FIM) 2010 server in your company network. The FIM server is synchronized by using Active Directory Domain Services (AD DS).
You create a workflow that modifies attributes of AD DS user accounts.
You apply the workflow to the accounts by using a Set Transition Management Policy Rule (MPR).
You discover that one of the attributes was calculated incorrectly.
You modify the workflow and select the Run on Policy update check box.
You need to apply the modified workflow to the same AD DS user accounts.
What should you do?

A.    Add the accounts to a new set. Add the set to the MPR.
B.    Add the accounts to a new set. Create a new Set Transition Out MPR. Add the workflow to the MPR.
C.    Create a new Inbound synchronization rule. Add the rule to the workflow.
D.    Create a new Outbound synchronization rule. Add the rule to the workflow.

Answer: A

Vendor: Microsoft
Exam Code: 70-158
Exam Name: Forefront Identity Manager 2010, Configuring
Version: 14.91

QUESTION 71
You administer a Forefront Identity Manager (FIM) 2010 server in your company network.
You need to create a new group that automatically includes users who report to either of two managers.
Which type of group should you create?

A.    Manager-based security group
B.    Manager-based distribution group
C.    Manually managed security group
D.    Criteria-based distribution group

Answer: D

Vendor: Microsoft
Exam Code: 70-158
Exam Name: Forefront Identity Manager 2010, Configuring
Version: 14.91

QUESTION 61
Drag and Drop Question
Your company network contains Microsoft Identity Integration Services (MIIS) 2003 and Microsoft SQL Server 2005 configured as shown in the following table.

You plan to upgrade the network to Forefront Identity Manager (FIM) 2010.
You want to separate the FIM Service, FIM Synchronization Service, and FIM Portal roles.
You need to identify the appropriate operating system and server roles that must be installed on the existing hardware.
What should you do?
(To answer, drag the appropriate component or components to the correct location or locations in the answer area.)

Answer:

Vendor: Microsoft
Exam Code: 70-158
Exam Name: Forefront Identity Manager 2010, Configuring
Version: 14.91

QUESTION 51
You administer a Forefront Identity Management (FIM) 2010 server in your company network. You configure an Active Directory Management Agent (AD MA).
The AD MA exports identity data to Active Directory.
You receive a permissions error during an export operation.
What is the cause of the error?

A.    The AD MA service account has not been granted proper permissions.
B.    The FIM MA service account has not been granted proper permissions.
C.    The FIM Service account does not have Replicating Directory Changes permissions.
D.    The FIM MA Service account does not have Replicating Directory Changes permissions.

Answer: A

Vendor: Microsoft
Exam Code: 70-158
Exam Name: Forefront Identity Manager 2010, Configuring
Version: 14.91

QUESTION 41
You use Forefront Identity Manager (FIM) 2010 in your company network.
You configure the Self- Service Password Reset feature for the FIM Portal.
You discover that existing users are able to submit password reset requests but new users are unable to register for Self-Service Password Reset.
You need to identify the cause of the issue.
Which Management Policy Rule settings should you validate? (Choose all that apply.)

A.    Anonymous users can reset their password
B.    Users can create registration objects for themselves
C.    Password reset users can read password reset objects
D.    User management: Users can read attributes of their own
E.    General: Users can read non-administrative configuration resources
F.    Password reset users can update the lockout attribute of themselves

Answer: AB

Vendor: Microsoft
Exam Code: 70-158
Exam Name: Forefront Identity Manager 2010, Configuring
Version: 14.91

QUESTION 31
You use Forefront Identity Manager (FIM) 2010 in your company network.
You install the FIM Service as a stand-alone server. During the creation process of the FIM Service Management Agent (MA), you are unable to connect to the FIM Service database by using Windows integrated authentication.
You run a Windows PowerShell script to verify the FIM MA account.
You discover a mismatch in the SIDs of the FIM MA account and registry configuration.
You need to create the FIM MA.
You need to achieve this goal without editing the registry.
What should you do?

A.    Reconnect to the FIM Service database by using the credentials associated with the FIM MA account
SID supplied by the Windows PowerShell script.
B.    Run the FIM Service and Portal program in Change mode. Configure Common Services to use a new
FIM Service account and password.
C.    Add the FIM MA account to the Local Administrators group of the connected domain controller.
D.    Connect to the FIM database by using SQL authentication mode.

Answer: B

Vendor: Microsoft
Exam Code: 70-158
Exam Name: Forefront Identity Manager 2010, Configuring
Version: 14.91

QUESTION 21
Your company network contains Forefront Identity Manager (FIM) 2010. Your company wants to extend the contracts of several groups of temporary employees through the next quarter.
You need to identify the security groups that will expire in the next three days.
Which XPath query should you use?

A.    /Group[Type= ‘Security’ and ExpirationTime <= op:add-dayTimeDuration-to-dateTime(fn:current- dateTime(),
xs:dayTimeDuration(‘P3D’))]
B.    /Group[Type= ‘Distribution’ and ExpirationTime >= op:add-dayTimeDuration-to- dateTime(fn:current-dateTime(),
xs:dayTimeDuration(‘P3D’))]
C.    /Group[Type= ‘Security’ and ExpirationTime == op:add-dayTimeDuration-to-dateTime(fn:current- dateTime(),
xs:dayTimeDuration(‘P3D’))]
D.    /Group[Type= ‘Security’ and ExpirationTime >= op:add-dayTimeDuration-to-dateTime(fn:current- dateTime(),
xs:dayTimeDuration(‘P3D’))]

Answer: A