IBM DataPower Interview Questions & Answers:

Q. What is the value timestamp format in logtarget for?

Timestamp Format: syslog

Q. What is the default log size in the logtarget? What happens when that log size is
reached?
Log size: 500 kilobytes,
When the log file reached the limit, the system will uploaded it to the FTP server and if it is
successfully uploaded, the appliance will delete the log in the system to free space.

Q. Why do we need logtarget when there is already a default logging mechanism available
in datapower?
we need logtarget to capture messages that are posted by the various objects and services
that are running on the appliance. In order to get a specific event or/and object log
information, we utilize log targets.

Q. What are the different modes of archival? Explain each mode in two lines each?
Rotate, rotate the log file when the maximum size is reached. The appliance creates a copy
of the file and starts a new file. The appliance retains the archived copies up to the specified
number of rotations. After reaching the maximum number of rotations and the log file
reaches its maximum size, the appliance deletes the oldest file and copies the current file.
Upload, upload the log file when the maximum size is reached. The appliance uploads the
file using the specified upload method.

Q. What is the difference between object type and object name and what happens when I
keep the add referenced object option to ‘off’?
Object Type, specify the type of object. This filter restricts log messages to only those
messages generated by the selected object.
Whereas, Object name specify the name of an existing object of the selected type.
When the add referenced object option is turned ‘off’, the appliance generates no
additional object filters anymore and includes events for only the specified object.

Q. In the datapower file system, the logs are stored defaultly in logtemp? True/false, give
appropriate file directory if the above statement is false.
True: logtemp, default location of log files, such as the system-wide default log.

Q. How to I collect a single log statement as alert as a mail when the object on which log
target is enables goes down or comes up?
It is done by setting up Event triggers. Event triggers perform actions only when triggered
by a specified message ID or event code in this case the system goes up/down. With this
filter, it is possible to create a log target that collects only the results of the specified trigger
action. For example, to trigger the generation of an error report when a certain event occurs
use the save error-report command and transfer to SMTP target format to send as an email
alert.

Q. What is the difference between object filter and event filter?

Object filters allow only those log messages for specific objects to be written to the specific
log target. Object filters are based on object classes. With this filter, you can create a log
target that collects only log messages generated by particular instances of the specified
object classes.
Event Filter allow only those log messages that contain the configured event codes to be
written to this log target. With this filter, it is possible to create a log target that collects only
log messages for a specific set of event codes.

Q. What is the log target type for sending the logs to email, what is the field name that has
to be given a value for subject representation of an email?
SMTP, forwards log entries as email to the configured remote SNMP servers and email
addresses. Before sending, the contents of the log can be encrypted or signed. The
processing rate can be limited.

Q. What is cryptography? Why do we need it?

Cryptography is to protect private communication in the public world. For example, two
entities wanting to communicate – Ajitab and Mulu – are shouting their messages in a room
full of people. Everyone can hear what they are saying. The goal of cryptography is to
protect this communication so that only Ajitab and Mulu can understand the content of the
messages.

Q. Why do we need it?

We need cryptography to share information confidentially which is ensuring the secrecy of
communication
Authentication – Ajitab can sign his message and Mulu can verify that he sent it based on his
signature
Integrity checking -Mulu can generate a checksum of the message. Ajitab can either extract
it from the message or recalculate it and verify that the message has not been changed.
Non-repudiation – if Ajitab signs the message he cannot deny later that he sent it, because
no one else could generate that same signature/private key.

Q. What are the weakness of symmetric key cryptography and what is the strength of the
asymmetric key cryptography?
Symmetric key cryptography–
- The biggest obstacle in successfully deploying a symmetric-key algorithm is the necessity
for a proper exchange of private keys. This transaction must be completed in a secure
manner. If face to-face meeting, which proves quite impractical in many circumstances
when taking distance and time into account, cannot be possible to exchange private keys. If
one assumes that security is a risk to begin with due to the desire for a secret exchange of
data in the first place, the exchange of keys becomes further complicated.
- Another problem concerns the compromise of a private key. In symmetric key
cryptography, every participant has an identical private key. As the number of participants
in a transaction increases, both the risk of compromise and the consequences of such a
compromise increase dramatically. Each additional user adds another potential point of
weakness that an attacker could take advantage of. If such an attacker succeeds in gaining
control of just one of the private keys in this world, every user, whether there are hundreds
of users or only a few, is completely compromised.
- Both Symmetric and Asymmetric-key cryptography also has vulnerabilities to attacks such
as the man in the middle attack. In this situation, a malicious third party intercepts a public
key on its way to one of the parties involved. The third party can then instead pass along his
or her own public key with a message claiming to be from the original sender. An attacker
can use this process at every step of an exchange in order to successfully impersonate each
member of the conversation without any other parties having knowledge of this deception.
Asymmetric cryptography –More secure!
- Asymmetric keys must be many times longer than keys in symmetric-cryptography in order
to boast security. While generating longer keys in other algorithms will usually prevent a
brute force attack from succeeding in any meaningful length of time, these computations
become more computationally intensive. These longer keys can still vary in effectiveness
depending on the computing power available to an attacker.

Q. Why do we need a digital signature?

Digital signatures act as a verifiable seal or signature to confirm the authenticity of the
sender and the integrity of the message. Users who wish to verify their identity when
sending a protected message can encrypt the information with their private key. The
recipient can then decrypt the message with the sender’s public key in order to confirm the
sender’s identity and the integrity of the message.

Q. Who issues a certificate, explain in detail?

Certificate authorities act as trusted third parties that verify the identity of the sender of an
encrypted message and issue digital certificates as evidence of authorization. These digital
certificates contain the public key of the sender, which is then passed along to the intended
recipient. The Certificate authorities do extensive background checks before giving an
organization or a given individual a certificate.

Q. Give three popular algorithms used for encryption?

1. Triple DES-uses three individual keys with 56 bits each. The total key length adds up to
168 bits, but experts would argue that 112-bits in key strength is more like it.
2. RSA- is a public-key encryption algorithm and the standard for encrypting data sent over
the internet.
3. AES-it is extremely efficient in 128-bit form, AES also uses keys of 192 and 256 bits for
heavy duty encryption purposes.

Q. How do you gauge the strength of the key, what is the parameter used?
The algorithm should be known to the public; but the key needs to be confidential
1. Key size
2. Performance/ Response time for Encryption or Decryption (depends on the system we
use)
3. Mathematical proof for standardization of security provided by that algorithm
4. Who provided the certificate for the algorithm and the date of expiration date?

Q. What is a trust store?

A trust store contains certificates from other parties that we expect to communicate with,
or from Certificate Authorities that we trust to identify other parties. For example, google
(chrome) contains certificate of many companies or websites. Whenever we browse that
site the browser automatically check the site for its certificate form the store and compare
it. If it is true, google will add the ‘s’ on ‘HTTP’. That way we know that website is secured
and trustworthy.

Q. Difference between WSP and MPGW?

WSP
Web Service Proxy is a powerful service in DataPower which provides abstraction and
security to the backend web services .It provide access to variety of web services.
WSP has many important characteristics like
 WSP is a WSDL Based Configuration
 Parser-based XML threat protection
 XML well-formedness checking
 It has a Tree structure in Processing Policy and we can have processing rules at
different levels – Proxy, WSDL, Service, Port and Port-Operation levels
 We Cannot have a loop back mode in WSP
 Match action and Policy will be automatically created
 It can only Handle SOAP based message format
 URI abstraction
 Schema Validation
 Building operation level rules.
MPGW
The Multi-Protocol Gateway is a powerful and versatile service. In additional to threat
protection and document processing capabilities, the Multi-Protocol Gateway can process
requests between various protocols. The supported protocols are HTTP,HTTPS, WebSphere
MQ, WebSphere JMS, IMS™, FTP, NFS, SFTP, and TIBCO EMS.
A single Multi-Protocol Gateway can have multiple front-side handlers that listen or poll for
requests. The ability of configuring multiple front-side handlers allows a Multi-Protocol
Gateway to receive requests from different protocols. For example, a
Multi-Protocol Gateway can have one front-side handler listening for HTTP requests and
another handler polling a WebSphere MQ queue for messages. Both front-side handlers
forward the incoming message to the Multi-Protocol Gateway for processing and forwarding
to the remote server.
Unlike a Web Service Proxy service, a Multi-Protocol Gateway service cannot use a WSDL to
determine a configuration.
 MPGW can accept all kinds of message formats like XML, SOAP,NON-XML,JSON
 It can accept all kinds of protocols as well
 We need to manually configure a match action and Processing policy
 We have a loopback mode in MPGW

Q. What are the components of a WSDL?

 WSDL Definitions
 WSDL Types
 WSDL Message
 WSDP Port and Operation
 WSDL Binding

Q. What is SLM and options available with that?

SLM has mainly 3 statements
 Throttle
 Notify
 Shape

Q. What are the Security features that you have enabled in Datapower?
 SSL Proxy Profile or Transport Layer Security
 Forward
 Reverse
 Two-way
 When DataPower Acts as Server
Create SSL proxy profile by following the steps shown below , it can be referred in any Front
side handler that supports SSL(Example HTTPS)

 When DataPower Acts as Client

 Upload certificate shared by server in cert/pubcert directory of Datapower File
Management.
 Create SSL proxy profile as shown [Link] can be either referred in proxy settings
or set dynamically using routing-ssl-profile variable
  Server to which Datapower acts as client will share its certificate to Datapower
(Client).
 Using certificate shared, a crypto certificate object is created.
 Crypto Validation credentials created using crypto certificate object will be included
in crypto profile.
 Crypto profile created will be used in Datapower as SSL proxy profile

 TWO-WAY-SSL-Proxy-Profile :
A TWO-WAY-SSL-Proxy-Profile contains two crypto profiles one refers crypto validation
credentials evaluated in response (Datapower as client to Backend) and other one refers
crypto Identification credentials used in request flow(When Datapower acts as SSL server to
front end systems)
 Message Level Security by Using AAA
AAA – Authentication Authorization and Auditing
AAA can be implemented in various ways like Digital Signature Method, LDAP
Authentication and [Link] file
AAA has mainly 5 steps:
1. How to Extract the User’s identity from an incoming request
2. How to Authenticate the User
 How to Extract the Resources
1. How to Authorize the User
2. Auditing
 Digital Signature Method
 Client/Consumer will be using their own Private Key to digitally sign a message and
sends to Datapower.
 Client/Consumer will be sharing their public Certificate to Datapower, which we
upload into Cert folder under File Management and Create a Crypto Certificate.
 The Created Crypto Certificate object will be used inside Crypto Validation
Credentials
 LDAP Method
 Client/Consumer will be sending the username token and password as part of WS-
Security Header.
 We extract the Header and Send it to LDAP Server for Authentication purpose
 xml Method
 Client/Consumer will be sending the username token and password as part of WS-
Security Header
 We extract the Header and verify the same in the [Link] file for Authentication
purpose

Q. What is an XML Manager and why do we need it?

An XML Manager provides the following capabilities
 Basic network configuration, such as load balancing and accessing remote servers.
 It acts as an XML parser in order to provide XML Threat Protection
 It helps in implementing Caching
 To configure the User Agent

Q. What kind of troubleshooting have you done in datapower?

 We use probe to capture the ongoingtransactions with respect to a service.
 We can also set the log level to debug mode in Troubleshooting Panel.
 We can make use of Log targets and Log Categories especially in Prod, as we are not
supposed to enable the probe in production.
 We have a default log file under logtemp directory in the file management, which
will have all the logs with respect to a domain
 If we have to customize the log files, we create log targets
 We can save the logs in a file on the DP Appliance itself under logstore or logtemp
directory
 We can also save the logs in an external server.

Q. What is a Processing Rule?

Every DP service will have a processing policy and every policy will have processing rules.
 Request rule to handle request messages
 Response rule to handle response messages
 Error Rule to handle error scenarios
Q. How do you Implement Dynamic Routing in Datapower?
In case of a dynamic backend, we update all the backend URL’s in an xml file and we use a
generic XSLT which will read the URL from the xml file based on certain customized
conditions and we set the routing variable var://service/routing-url in the XSLT.

Q. What is xsl:param ?
The <xsl:param> element is used to declare a local or global parameter. The parameter is
global if it’s declared as a top-level element, and local if it’s declared within a template.
<xsl:param name=”name” select=”expression”>
<!–Content:template –>
</xsl:param>

Q. Difference between Apply-template and Call-template?

The <xsl:apply-templates> element applies a template to the current element or to the
current element’s child nodes.
If we add a select attribute to the <xsl:apply-templates> element it will process only the
child element that matches the value of the attribute. We can use the select attribute to
specify the order in which the child nodes are processed.
The <xsl:call-template> element calls a named template.
<xsl:call-template name=”templatename”>
<!–Content:xsl:with-param* –>
</xsl:call-template>
 Note:
 In terms of raw performance xsl:call-template is likely to be faster, as you are calling
a specific named template, rather than telling the XSLT processor to pick the
template which best matches
 With call-template you have to know what you’re calling. apply-templates is
polymorphic – what gets called depends on what you find in the input, which means
it is the key feature that enables XSLT to respond to variable or unpredictable input –
essential when handling documents as distinct from structured data.
 apply-templates is usually (but not necessarily) used to process all or a subset of
children of the current node with all applicable templates. This supports the
recursiveness of XSLT application which is matching the (possible) recursiveness of
the processed XML.
 call-template on the other hand is much more like a normal function call. You
execute exactly one (named) template, usually with one or more parameters.

Q. Difference between Copy and Copy-of?

The <xsl:copy> element creates a copy of the current node.
Note: Namespace nodes of the current node are automatically copied as well, but child
nodes and attributes of the current node are not automatically copied!
The <xsl:copy-of> element creates a copy of the current node.
Note: Namespace nodes, child nodes, and attributes of the current node are automatically
copied as well!

Q. What are the Datapower Variables?

Local – var://local/userdefinedname
A local context variable in the default (current) context.
The local context does not persist beyond the scope of the transaction. A transaction can
include both a request component and a response component. The local context cannot be
accessed by any object outside the scope of the transaction. In other words, a service
cannot read and use the variable.
Context – var://context/contextdefinition/userdefinedname
Addresses a variable in a named context.
Service – mention any service variable for ex : var://service/routing-url, var://service/error-
code, var://service/url-in
Addresses a variable that is made available to a DataPower service that is attached to a
session.

Q. What is a Passthrough Service?

Passthrough is basically accepting and sending a request to the backend without modifying
it in Datapower

Q. How do you handle Error scenarios?

We create an error rule in which we use a generic XSLT, which creates a fault message by
reading the Service variables
<?xml version=”1.0″ encoding=”UTF-8″?>
<xsl:stylesheetxmlns:xsl=”[Link]
xmlns:dp=”[Link]
xmlns:dpconfig=”[Link]
xmlns:dpfunc=”[Link]
exclude-result-prefixes=”dp”
extension-element-prefixes=”dpdpconfigdpfunc”
version=”1.0″>
<xsl:template match=”/”>
<xsl:variable name=”rejected”>
<env:Envelope
xmlns:env=”[Link]
<env:Body>
<env:Fault>
<faultcode>env:Client</faultcode>
<faultstring>
<xsl:element name=”error_headers”>
<xsl:copy-of select=”dp:variable(‘var://service/error-headers’)”/>
</xsl:element>
<xsl:element name=”error_message”>
<xsl:copy-of select=”dp:variable(‘var://service/error-message’)” />
</xsl:element>
<xsl:element name=”transaction_id”>
<xsl:value-of select=”dp:variable(‘var://service/transaction-id’)”/>
</xsl:element>
<xsl:element name=”error_code”>
<xsl:value-of select=”dp:variable(‘var://service/error-code’)”/>
</xsl:element>
<xsl:element name=”error_subcode”>
<xsl:value-of select=”dp:variable(‘var://service/error-subcode’)”/>
</xsl:element>
<xsl:element name=”formatted_error_msg”>
<xsl:value-of select=”dp:variable(‘var://service/formatted-error-message’)”/>
</xsl:element>
<xsl:element name=”error_protocol_reason_phrase”>
<xsl:value-of select=”dp:variable(‘var://service/error-protocol-reason-phrase’)”/>
</xsl:element>
</faultstring>
</env:Fault>
</env:Body>
</env:Envelope>
</xsl:variable>
<xsl:copy-of select=”$rejected”/>
</xsl:template>
</xsl:stylesheet>

Q. Have you worked on Datapower Extension functions? If so, can you please name some of
them?
Yes.
Whenever we need to use DP EXTN Functions, we always need to declare the below
namespace.
xmlns:dp=[Link]
 dp:set-variable:
<dp:set-variable name=”variableName” value=”variableValue”/>
 dp:reject :
The appliance sends the denial message to the client in a SOAP fault message. Also stops
document processing and optionally invokes the error rule for custom error handling
<dp:reject override=”true | false”>
text
</dp:reject>
 dp:set-http-request-header :
<dp:set-http-request-header name=”httpHeaderField”
value=”httpHeaderFieldValue”/>
If a client request already includes the field identified by the name attribute, thisextension
element overwrites the specified header field value in the client request.
If the header field does not exist, this extension function adds the specified name and value
to the client request.

Q. What is the advantage of Datapower over Message Broker?

Message Broker Datapower

Integrating and leveraging the Similar to Message Broker, DataPower can do

WebSphere MQ messaging any-to-any transformation (in theory, Yes. But in
 infrastructure. practice, you may need to use WebSphere
Transformation Extender (WTX)).

Supports different protocols such as MQ, Supports almost every security protocols and
JMS, HTTP(S), Web Services, ftp, and different authentication/authorization schemas,
convert one to the other. such as Web Service security/policy, TLS/SSL,
SAML, LDAP, RADIUS, etc.

Supports a wide range of data formats, Provides field level security: WS-security down to
including XML, binary (COBOL, C), the individual operation, encrypt & sign individual
positional/delimited, and industry fields, nonrepudiation.
formats (EDI, SWIFT), and convert one to
the other.

Provides a number of capabilities to Data validation, parsing and filtering, and meta
customize mediation, including C/C++, data manipulation.
ESQL, Java, XSLT, and PHP.

WebSphere Adapters for enterprise Transport level protocol conversions from any-to-
applications (SAP, PeopleSoft and Siebel). any.

Offers z/OS clients platform-specific

benefits (CICS, VSAM).

Q. How do you migrate your services from one environment to another or how do you
deploy your services from one environment to another?
We have a support team who takes care of Service deployments. We take an export of the
service which needs to be deployed and keep it in a SVN location. Our support team has
some scripts, which they execute in the server and does the deployment.
We can also use Export and Import configuration along with the Deployment Policy.

Q. What is an on-error action in XI52?

An on-error action defines a named rule that enables user-defined error handling when
subsequent processing encounters errors. This topic instructs how to define an on-error
action.
The on-error action either stops processing or continues to the next processing step.
Optionally, the action calls the named rule to handle the error condition. Without an on-
error action, the default error handling is to stop processing and log a message.
A processing rule can contain one or more on-error actions. Each action defines error
handling for subsequent actions until another on-error action is found. When another action
is found, error-handling procedures are set to the new on-error action. As such, this action
enables conditional error handling in a processing context.
Note: A processing policy can contain on-error actions and an error rule. When a processing
policy contains both on-error actions and an error rule, the on-error action overrides the
error rule. An error rule, if the processing policy contains one, is invoked when an error
occurs during processing. In this case, the error rule acts as an error handler.
Q. Explain about your Roles and Responsibilities?
 Gathering the requirements from Client
 Preparing the Design Document
 Presenting the Design document to Client for approval
 Configuring the service in Development environment
 Testing and Troubleshooting of DP Services
 Migrating the services from Dev to test and to production environment

Q. What is an Application Domain?

An application domain allows the administrators to partition an appliance into multiple
logical [Link] example the developers and production employees environment
is different.

Q. What are the different modes through which you can connect to Datapower?
 GUI
 CLI
 XML-Management Interface

Q. How to take secure backup?

 To securely back up the appliance configuration from the WebGUI:
 Click Administration => Main => System Control.
 Locate the Secure Backup section.
 From the Crypto certificate list, select the certificate to encrypt the secure backup.
 In the Destination field, enter the URL of the target directory for the backup files.
 Click Secure Backup to back up the appliance.

Q. How to integrate MQ with Datapower?

[Link]
1410_sahoo.html

Q. Explain About WebSphere Commerce?

IBM websphere commerce has a single platform which offers complete ecommerce
solutions to developers. It can be very productive if you are planning to do business with
consumers, business and indirectly through channel partners. This can be used to perform
business with consumers, business and channel partners altogether.

Q. Explain About Extended Deployment?

Web sphere application server extended deployment increases the functionality of the
server in two main areas they are manageability and performance. Dynamic virtualization
between servers is possible with the help of XD. A stand-alone distributed cache was added
to it under the performance header, it is known as Object Grid.
Q. State Some of The Features Present In WebSphere?
Some of the features which are present in web sphere are:-
• Order management
• Web sphere commerce accelerator
• Analytical and business intelligence
• Open standards such as Java, EJB, etc
• Web sphere commerce payments and customer care, etc.

Q. Explain About Asymmetric Clustering?

Asymmetric clustering applications are primarily used in electronic trading systems
employed in banks. Some of the features are, partitions can be declared during run time and
are usually run on a single cluster at a time. Work specific to a particular can be routed to
that cluster.

Q. Where to set the Path?

Environments –> WebSphere variables

Q. Explain About Caching Proxy Of IBM WebSphere EdgeSphere?

A caching proxy can be configured in forward direction or as a proxy.
Content requested by the user is cached by edge before sending or adhering to the query.
Page fragments arising from JSP or servlets are cached by Edge and the caching process is
slow. Performance and scalability of J2EE applications can be increased by edge.

Q. What are the different modes of archival? Explain each mode in two lineseache?
Rotate: rotate the log file when the maximum size is reached. The appliance creates a copy
of the file and starts a new file. The appliance retains the archived copies up to the specified
number of rotations. After reaching the maximum number of rotations and the log file
reaches its maximum size, the appliance deletes the oldest file and copies the current file.
Upload: upload the log file when the maximum size is reached. The appliance uploads the
file using the specified upload method.(Top 50 IBM Datapower

Q. How to test API’s?

To test the API’s you should follow the following steps
 Select the suite in which you want to add the API test case
 Choose test development mode
 Develop test cases for the desired API methods
 Configure application control parameters
 Configure test conditions
 Configure method validation
 Execute API test
 View test reports
 Filter API test cases
 Sequence API test cases

Q. Explain About Websphere Mq Real Time Transport?

This feature is very useful in instant messaging across different clients through intranet and
internet. This supports high volume and high performance across different clients. It uses
the concept of lightweight transport which is again based on IP rather than the queue
process.

Q. Explain The Attribute Channel In Websphere Mq?

CHANNEL specifies the name of the server connection channel. Generally this is Websphere
MQ network abstraction. The default standard used by CHANNEL is SVRCONN which is the
server connection channel. This server is generally used to communicate to the queue
manager by the client.

Q. Is The Naming Of Connection Factory Independent Of The Name Specified By Jms Client?
Yes, the naming of connection factory is independent of the name specified by JMS client.
This is made possible by WAS (Websphere application server) with its resource references. It
isolates the application from object names.
This feature is important because it gives us the flexibility to change the administered object
without changing the JMS client code.

Q. What About Master Repository?

Deployment manager contains the MASTER configuration and application files. All updates
to the configuration files should go through the deployment manager.

Q. Tell Me Ihs Executable Files, Means Bin Directory Files?

Apache, ApacheMonitor, htpasswd, digest, htdbm, ldapstash, [Link]

Q. How Many Types Of Profiles Are In Nd Product?

1. deployment manager profiles
2. application server profiles
3. Custom profile.

Q. What Is The Node?

A node corresponds to a physical computer system with a distinct IP host address. The
node name is usually the same as the host name for the computer.

Q. What Is Difference B/w Dmgr And Other Profiles?

dmgr app custom:
Its used for administration admin console is there plain node purpose of remaining profiles
initially one app server there empty node it supports the distributed
work independently environment.
Put applications:
It is not included app server admin console is there work independently do not put
applications.

Q. What Is The Default Log Size In The Log Target? What Happens When That Log Size Is
Reached?
Log size: 500 kilobytes,
When the log file reached the limit, the system will uploaded it to the FTP server and if it is
successfully uploaded, the appliance will delete the log in the system to free space.

Q. What Is Data source?

A data source is associated with a jdbc provider that supplies the specific jdbc driver
implementation class.

Q. What are the tools used for API testing?

The tools used for various API testing are
 SoapUI Pro
  LoadUI Pro
 Alertsite API monitoring

Q. What Are The Appserver Components?

admin server, web container, ejb container,j2c service, naming server, messaging engine,
security server.

Q. How To Hit Application Without Hitting The Web Server?

web container port on application server.

Q. HOW TO OPEN ADMIN CONSOLE IN AIX/UNIX & WHAT IS THE DEFAULT FILE SYSTEM OF
AIX?
Admin console can be viewed from remote machine which has a browser, if not behind
firewall.

Q. What is DataPower? How and why does An?

All DataPower Appliances are built on IBM’s XSeries 1U Chassis, which include hot
swappable Power, Disks, and Fans. DataPower Appliances contain many specialized
hardware components, including ASIC-based IPS, Custom Encrypted RAID Drives, and
Hardware Security Modules. Externally facing, all DataPower Appliances have 4 Ethernet
ports and 1 Serial port.
DataPower Appliances operate a single digitally signed Firmware containing an operating
system and application stack. Data Power’s firmware runs on a flash storage device. IBM
refreshes and enhances the DataPower Firmware image every 10–20 weeks. DataPower
firmware is a well performing and highly optimized platform to perform electronic
messaging functions. As a result, users cannot run 3rd party applications on DataPower as
they would a traditional server and operating system. Instead of a traditional Files system,
DataPower runs with a collection of isolated virtual File Systems called ‘Application
Domains’. As a result, DataPower can appear to its client connections be any type of
network file system with any type of folders and links. Another purpose of Data Power’s
firmware platform is security. The DataPower TCP and UDP network stack is expected to
provide near-constant throughput under the most extreme and sophisticated DDoS and XSS
network attacks.

Q. Diff B/w 5.0 And 6.0?

Web Sphere Studio 3.5, comes up with Visual Age for Java. WSAD 5.0 supports J2EE 1.3 java
specifications. RAD 6.0 supports J2EE 1.4 and integrated with Eclipse 3.0, UML Visual Editor,
Tomcat Jakarta, Ant scripting, EJB universal test client and SOA tools.

Q. WHAT IS INCIDENT MANAGEMENT?

It is part of ITIL process. Simpleexplanation is, when there is a problem in Ur WAS
environment, which procedure do you follow.

Q. WHAT IS TRACING?
Tracing is when you go through an entire program and record the value of variables and the
output. You trace a program when you want to find out what actually went wrong.

Q. What Is A Managed Webserver?

Remote webserver access through local (dmgr/cell)

Q. I HAVE 16GB RAM, WHAT IS THE MINIMUM & MAXIMUM HEAP SIZE?
No relation. Heap settings should be made depends on application

Q. HOW TO RESOLVE PORT CONFLICTS IN PRODUCTION ENVIRONMENT?

Check why there is port conflict Run update ports script in WAS.

Q. What Is Jdbc?
jdbc is a low level pure java api used to execute sql statements.

Q. Explain The Various Administrator Benefits Using WebSphere?

Websphere almost reduces the work of server administrator as he can manage load on
servers efficiently without any hassles. It also gives him flexibility to divide the load and
applications among different server farms. He can also predict about the incoming load on
servers. Email alerts, restart options, memory leak detection, etc.

Q. Explain About the Network Deployment Feature Present In was?

Managing singletons will be a thing of the past and it also provides hot recovery of
singletons which makes you forget about your GC collected singletons.
Transaction logs can be stored on a shared file system. For clustering, run-time operations
deployment manager`s role was eliminated. J2EE failover support and
cell configuration support is also present.

Q. Explain About Websphere Mq Jms Provider?

Websphere MQ and Websphere Business integration manager Broker are very useful in
providing Java messaging services to wide range of clients (publisher
–subscribe, point to point). Java classes are chiefly responsible for translating the API calls to
API`s defined by websphere. It is very useful to have knowledge of Websphere MQ for
proper configuration.

Q. Why Given The [Link] File To Installation Of Plug-in?

Identify the web server (port, virtual hosts) to configure the web server Definition.

Q. What Is The Trace?

A trace is an informational record that is intended for service engineers or developers to
use. As such, a trace record might be considerably more complex, verbose and detailed than
a message entry.

Q. What About IHS?

IHS (IBM HTTP Server) is one of the web servers. It serves the static content
only and it takes up only https requests.

Q. What Is Pmi? How to Configure Pmi?

Monitoring and tuning–>PMI–>select any process (server1, node agent,dmgr) and then
enable PMI–>then apply and then save. Select performance viewer–>current activity and
then select enabled process and click the start monitoring button after that process
selected.
Q. Explain About the Network Deployment Feature Present In Was?
Managing singletons will be a thing of the past and it also provides hot recovery of
singletons which makes you forget about your GC collected singletons.
Transaction logs can stored on a shared file system. For clustering run time operations
deployment manager`s role was eliminated. J2EE failover support and cell configuration
support is also present.

Q. What Is The Profile?

Profiles are a set of files that represent a WebSphere application server configuration.

Q. What Is Heap Memory?

Objects storage space for objects references created at run time in a jvm is heap memory.

Q. Out Of Memory Exception Is There, How To Handle That Exception?

To increase heap memory size.

Q. How to Configure the Global Security?

Open the console and then select security option in the right side menu, and then select
local registry in the user registry, then enter the username, passwords. And again select
global security then ltpa option then provide the password, then save the configuration. And
restart the deployment server and then re-login the console.

-------------------------------
Q. What is the architecture of your current project?
[Link] how you have deployed DP in your Project.
Q. How did you implement SSL in DataPower ?
Q. How to configure WS Proxy Services in Data Power?
Q. What is the difference between WSP and MPGW?
Q. What is the best standard to implement if u want message non repudiation ?
Q. Have you implemented AAA and expalin configuration of AAA?
Q. What is the difference between forward , reverse and two way in SSL?
Q. Ever you face issues in your data power projects & explain?
Q. What is prob in data power?
Q. Explain data power deployment of your project architecture?
Q. What is TICKETING in data power?
Q. What is UAT?
Q. What is REMEDY tool?
Q. What is DataPower? Which box are you currently working on?
Q. What does XI50 stands for? How is better compared to XA32 and XS40?
Q. What are the Action types used in previous project?
Q. What is an own error action in XI50?
Q. How does AAA action work?
Q. Can you have mainframe as a backend ? which protocol will you use to pass the
messages?
Q. Difference between WSP and MPG's?
Q. What is XML Manager in XI50?
Q. How do you write an error rule?
Q. How do you rate yourself in XSLT?
Q. How datapower is used in your previous Project?
Q. ESB or Secure Gateway ?
Q. What are Authentication Systems You Integrated with Datapower?
Q. How You configured Crypto Objects?
Q. Explain about SSL?
Q. Difference between 1-way SSL and 2-Way SSL?
Q. What all the ways to troubleshoot?
Q. In Which you zone you used datapower in intranet or DMZ and Y?
Q. Have you worked on high traffic applications ?
Q. Have you worked on Logging mechanism in datapower?
Q. Variables in DataPower (local, context, service and system) what is the scope and life
time.
Q. How you perform monitoring and maintain SLAs in Datapower. (monitors and SLM)
Q. Try to remember few service variable names along with their purpose.
Q. Datapower integration with MQ (use of Multi protocol Gateway here).
Q. How you handle Binary data in Datapower.(use of ffd files)
Q. How xml threat protection is achieved in Datapower.
Q. Datapower extension function and variables.
Q. Request and Response types supported by DataPower.
Q. Memory Management
Q. AAA is very important (especially stuffs related to tokens LTPA, kerberos)