Get Reliable EX362 Exam Questions (V8.02) to Make Preparations: Continue to Check EX362 Free Dumps (Part 2, Q41-Q60) Online

1. Configure PostgreSQL on db1 for Kerberos logins by IdM users.

2. Build an SSO edge with Apache in front of NGINX app on localhost:8081―Apache performs SPNEGO, NGINX serves content.

3. Add multiple SPNs for a vhost with aliases (web.example.com and web1.example.com) and load both into the same keytab.

4. Add a new replication segment directly between ipa1 and a third server ipa3 to form a triangle topology.

5. Install the same replica using Ansible with ipareplica role, also enabling KRA (for key escrow).

6. Perform a CA-less IdM deployment using an external corporate CA. Complete the two-stage process.

7. Configure browsers for seamless SSO to *.example.com.

8. Enable Kerberos SSO to PostgreSQL (db1.example.com) for IdM users.

9. Verify HTTP SSO at the protocol level using SPNEGO―collect a service ticket for HTTP/web1.example.com.

10. Enable home-dir auto-creation via PAM/oddjob for IdM logins on a client already enrolled.

11. Rotate the HTTP service key (keytab) with near-zero downtime.

12. Delegate safe keytab retrieval to a non-admin “service owner” so they can (re)fetch only HTTP/web1.example.com.

13. Use ldapsearch with Kerberos (SASL/GSSAPI) from a client to query IdM.

14. Switch SSSD to use KCM credential cache and verify automatic ticket renewal for logins.

15. Set up GSSAPI delegation so Alice can hop from ws1 ® app1 ® db1 without re-auth.

16. Troubleshoot client enrollment time/DNS issues quickly.

17. Enable SSH Kerberos SSO (GSSAPI) from workstation ws1 to server app1.

18. Configure a conditional DNS forward zone in IdM DNS so that queries for corp.local go to 10.20.20.53.

19. Enable OK-AS-DELEGATE for a web service so browsers can forward delegated credentials to it (needed for KCD/S4U).

20. Configure NFSv4 with Kerberos (krb5p): export /srv/projects from nfs1 and mount on app1.