You are planning to deploy Forefront Identity Manager (FIM) 2010 in your company network. You want to provide identity management between a Human Resources application and Active Directory Domain Services (AD DS). You need to ensure that the synchronization service instance can be returned if the primary server fails. What should you implement?
A. A cluster server
B. A warm-standby server
C. A software load-balance server
D. A hardware load-balance appliance
Answer: B
Question: 2.
You are planning to deploy Forefront Identity Manager (FIM) 2010 in your company network to provide an identity management solution between an enterprise resource planning (ERP) application and Active Directory. The solution will contain the following FIM services: FIM Service FIM Service database FIM Synchronization Service FIM Synchronization Service database. You need to ensure that all FIM services support fault tolerance. What should you do? (Choose all that apply.)
A. Deploy FIM Service in a network load-balanced configuration.
B. Deploy a FIM Service instance on an active server and a second FIM service instance on a standby server.
C. Deploy the FIM Synchronization Service database and FIM Service database in a failover cluster configuration.
D. Deploy the FIM Synchronization Service database and FIM Service database in a network load-balanced configuration.
E. Deploy a FIM Synchronization Service instance on an active physical server and a second FIM Synchronization Service instance on a standby physical server.
Answer: BCE
You deploy Forefront Identity Manager (FIM) in your company network to synchronize user accounts between Active Directory and an HR application. End users use the FIM Self-Service Portal to reset passwords and manage groups. You use a two-tiered architecture according to the following table.
Server Roles
One back-end server ?FIM Synchronization database (dedicated disk) FIM Service database (dedicated disk) FIM Synchronization Service FIM Service (dedicated to FIM Synchronization Service access) FIM Portal
Two load-balanced front-end servers ?FIM Service FIM Self-Service Portal
Currently, the number of users and groups has doubled. You experience delays in performance of the Active Directory Management Agent (AD MA). You need to improve the performance of the MA . What should you do?
A. Configure the AD MA to run as a different service account.
B. Add an additional front-end server to the two load-balanced front-end servers.
C. Split the FIM Synchronization Service, and then install it on a new separate physical server.
D. Split the FIM Portal from the back end, and then install it on a new separate physical server.
Answer: C
Question: 4.
You are planning to deploy Forefront Identity Manager (FIM) 2010 in your company network. You need to select a FIM topology that meets the following requirements: Removes single points of failure. Separates end-user operations from administrative data synchronization. What should you do? (Choose all that apply.)
A. Create two service partitions.
B. Create four service partitions.
C. Create two instances of the FIM Service by using two FIM Service Names.
D. Create four instances of the FIM Service by using two FIM Service Names.
Answer: AD
You are deploying Forefront Identity Manager (FIM) to your company network. End users will use the password self-service, user profile management, and group management from the FIM Portal. You use a separate account to install all FIM software on a server allocated for FIM installation. You need to complete the portal installation of FIM services. What should you do? (Choose all that apply.)
A. Ensure that delegation is disabled for the FIM service account.
B. Ensure that delegation is disabled for the SharePointService account.
C. Ensure that the FIM installation account has SQL sysadmin rights.
D. Ensure that the FIM Installation account has SharePoint administrator permissions.
E. Configure the SharePoint Application Pool account to use the Configurable service account.
Answer: CDE
Question: 6.
You administer a Forefront Identity Management (FIM) 2010 server in your company network. You need to be able to synchronize user accounts between Active Directory Domain Services (AD DS) and third-party directory services by using the FIM Portal. What should you do?
A. Add the FIM Synchronization Service (FIMSynchronizationService) account to the FIMSyncAdmins group.
B. Add the FIM Service (FIMService) account to the FIMSyncAdmins group.
C. Change the FIM Service (FIMService) account configuration to logon as local system account.
D. Change the FIM Synchronization Service (FIMSynchronizationService) account configuration to logon as local system account.
Answer: B
Question: 7.
You deploy Forefront Identity Manager (FIM) 2010 in your company network. You need to activate Kerberos authentication for the FIM Portal. What should you do?
A. Modify the ResourceManagementClient section of the web.config file.
B. From the Internet Information Services (IIS) Manager console, change Windows Authentication to Enable Kernel-mode authentication.
C. From the SharePoint Central Administration website, on the Edit Authentication page, clear Integrated Windows Authentication.
D. From the SharePoint Central Administration website, on the Edit Authentication page, change Authentication Type to Web Single sign on.
Answer: A
Question: 8.
You are planning to deploy Forefront Identity Manager (FIM) 2010 in your company network. Which server platform should you install before the FIM Portal?
A. Windows SharePoint Services (WSS) 3.0
B. Microsoft SharePoint Foundation 2010
C. Microsoft SharePoint Server 2010
D. Microsoft Office SharePoint Server 2007
Answer: A
