C1000-074: IBM FileNet P8 V5.5.3 Deployment ProfessionalDemo

By IBM · Question Mode

QuestionQ40

Configuration

As a best practice, how should the Content Platform Engine be configured in order to protect user credentials when the EJB transport is used?

  • A To enable Transport Security Layer (TSL) and Secure Socket Layers (SSL)
  • B To enable Single-Sign On (SSO) and Secure Socket Layers (SSL)
  • C To enable Transport Layer Security (TLS) and Single Sign-On (SSO)
  • D To enable Transport Layer Security (TLS) and Secure Socket Layers (SSL)
Explanation

IBM recommends configuring Content Platform Engine to use Single Sign-On (SSO) together with Secure Sockets Layer (SSL) encryption when using the EJB transport. SSO allows the engine to rely on an already-established JAAS security context (via an SSO provider's login module) rather than repeatedly transmitting raw credentials, while SSL encrypts the network traffic between the client and the application server hosting Content Platform Engine, preventing credentials and data from being exposed in transit. This combination is the documented best practice in IBM FileNet P8 security guidance for protecting user credentials over the EJB transport.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!