An HCL Workload Automation administrator wants to automate the database password rotation by running a script that updates the db.password entry in the properties file. However, compliance requires that the script must not write clear text passwords to disk at any stage, even temporarily. The platform offers a secure script that produces an encrypted password value. How should the administrator incorporate this into the rotation process to satisfy compliance requirements?

• A.Use the secure script to generate the encrypted password and have the automation script replace the db.password value with the encrypted string directly in the properties file
• B.Use the automation script to write the clear text password into the properties file and rely on the engine to encrypt it when starting
• C.Avoid using the secure script and encode the password in base64 before writing it into db.password
• D.Generate the encrypted password with the secure script, manually paste it into the properties file, and then let the automation script change db.user only

Comment: *

Name: *

Email: *

Verification: *

Advanced workload security to restrict privileged job submission using elevated credentials, which setting?

• A.SECURITY role with PRIVILEGED
• B.USER with ELEVATED=YES
• C.optman enPrivileged
• D.JOB ACCESS=SUBMIT with PRIVILEGED=YES
• E.PRIVILEGEDJOB ACCESS=SUBMIT for restricted users

Comment: *

Name: *

Email: *

Verification: *

Typical HCL Workload Automation 10.2 installation network assessment reveals 15% packet loss during dynamic agent registration storm. Production peak: 2,000 agents connecting 31114/tcp simultaneously. NIC stats show TX drops. Server: dual Mellanox ConnectX-5 25GbE bonded LACP. Which server installation network tuning using precise ethtool commands eliminates packet loss?

• A.ethtool -C eth2-3 rx-usecs 512 tx-usecs 1024; ethtool -G eth2-3 rx 4096 tx 4096; echo 32768 > /sys/class/net/bond0/queues/rx-0/rps_cpus
• B.tc qdisc add dev bond0 root handle 1: htb default 10; tc class add dev bond0 parent 1: classid 1:10 htb rate 20gbit
• C.bonding: mode=balance-xor xmit_hash_policy=layer3+4; ethtool -K eth2-3 tso off gso off gro off
• D.mlnx_tune -p HIGH_THROUGHPUT; echo "options mlx5_core port_type=2 num_comp_vectors=128" > /etc/modprobe.d/mlx5.conf

Comment: *

Name: *

Email: *

Verification: *

In a scenario where DB2 is configured in HADR for high availability reporting in Dynamic Workload Console connected to HCL Workload Automation 10.2, which datasource parameter enables automatic client reroute to the secondary database?

• A.clientRerouteAlternateServerName and clientRerouteAlternatePortNumber in the jndiEntry URL
• B.hadrConnection=true in localopts
• C.enableHADR=true in the template file
• D.failoverMode=HADR in datasource_DB2.xml
• E.secondaryDbUrl in global options

Comment: *

Name: *

Email: *

Verification: *

HCL HWA 10.2 SSO with OAuth2 PKCE fails authorization code exchange: "invalid code_verifier". Mobile app sends S256 challenge but Liberty oauth-2.0 missing PKCE support. Required client configuration?

• A.server.xml: <oauth-2.0 pkceRequired="public_clients"/>
• B.Keycloak client: PKCE Method: S256; Enable PKCE Challenge
• C.<oauth-2.0 clientMetadata codeChallengeMethod="S256"/>
• D.PKCE enabled automatically for mobile clients

Comment: *

Name: *

Email: *

Verification: *