An organization has isolated environments for development, functional, integration and performance testing. Each environment includes at least one DataPower appliance, client, and several instances of backend systems. A solution implementer has made changes to a DataPower service in the development environment that needs to be promoted to other testenvironments for further testing. During migration, environment specific values must be changed in order for the configuration to integrate with the correct backend systems in the target environment. What options does the solution implementer have to automate this migration? (choose three)

• A. Use the Deployment Policy object to changeenvironment specific values at the time of export at the source appliance.
• B. Use an external script to search and replace environment values. Then use the script to push the configuration via CLI or XML Management Interface.
• C. Use the WebGUI to change environment specific values and then export the configuration.
• D. Take a secure backup of the appliance and secure restore the configuration on the target appliance.
• E. Use the Deployment Policy object to change environment specific values at the time of import at the target appliance.
• F. Use the checkpoint function of the appliance to save copies of configuration for specific target environments.

A solution implementer has created a Deployment Policy to scan through configuration objects when they are imported and to remove any references to appliance specific settings such as the Ethernet addresses. Which of the following Deployment Policy settings would provide this functionality? (choose two)

• A. A Filtered Configuration with a list of the objects that are to be included.
• B. A Filtered Configuration with a list of the objects that are to be excluded.
• C. A Modified Configuration with rules specifying Delete Configuration for the object references to be removed on import.
• D. A Rejected Configuration with a list ofthe objects that must be rejected during import.
• E. An Accepted Configuration with a list of the correct values for the properties forany named objects that will be updated during import.

A financial services company (Company) is using a DataPower appliance to securely access an external service provider (Partner) that processes SOAP/HTTPS payment transactions and returns the responses to the requesting application in the Company with payment confirmations. The Partner requires that Company establish non-repudiation so that the financial services company cannot deny that the payment transaction was originated by them. The Company requires that the confirmation sent back from the Partner also requires non-repudiation. Which of the following statements is true?

• A. Request Rule must Sign with crypto object containing the public certificate of Partner and Response Rule must Verify with crypto object containing Company private key
• B. Request Rule must Verify with crypto object containing Company public certificate and Response Rule must Sign with crypto object containing Partner private key
• C. Request Rule must Sign with crypto object containing the Company private key and Response Rule must Verify with crypto object containing Partner public certificate
• D. Request Rule must Verify with crypto objectcontaining the private key of Partner and Response Rule must Sign with crypto object containing Company public certificate

A customer needs message privacy and message integrity on a given transaction, and prefers the use of WS-Policy. WebSphere DataPower must receive a username from each user, but no authentication is required. In order to implement this without additional custom work, the solution implementer can:

• A. use WS-Policy with Encryption, Signature and pass the username in the message body.
• B. use WS-Policy with UsernameToken, Encryption and Signature enforced.
• C. use a basic authentication header, then use the default encryption and signature inherent in the WS-Proxy.
• D. use an Encrypt and SignAction in the request, followed by a Decrypt and Verify Action in the response.