Government agency performs HCL Workload Automation 10.2 server installation requiring STIG Level 2 compliance on RHEL 8.8. serverinst succeeds but auditd blocks monman execve calls citing SELinux denials. sestatus shows permissive. Production requires classified workload scheduling. Which server installation SELinux configuration using precise semodule syntax enables compliant deployment?

• A.semanage fcontext -a -t bin_t "/opt/hwa/TWS/bin(/.*)?"; restorecon -Rv /opt/hwa/TWS/bin
• B.semodule -i hwa-server-10.2.pp; setsebool -P httpd_can_network_connect 1; restorecon -R /opt/hwa
• C.ausearch -m avc -ts recent | audit2allow -M hwa_policy; semodule -i hwa_policy.pp
• D.chcon -Rt hwa_server_t /opt/hwa/TWS; semodule -d container_runtime; setenforce 1

Comment: *

Name: *

Email: *

Verification: *

Scenario: Installing a dynamic agent with advanced job types requiring Java in 10.2. Which twsinst parameter ensures embedded JRE inclusion?

• A.-jmportssl true
• B.-advancedjobs true
• C.-java true
• D.-jreinstall yes
• E.-addjruntime true

Comment: *

Name: *

Email: *

Verification: *

Configuring authentication HCL HWA 10.2 Kerberos SSO fails SPN validation: "GSS-API: Server not found in Kerberos database". Liberty server.xml gssapiToken login module configured but keytab mismatch. Required ktpass command?

• A.ktpass /add /princ tws/[email protected] /mapuser twsusr /crypto RC4-HMAC /out dwc.keytab
• B.Kerberos SPN auto-registered by Liberty
• C.Use client certificate authentication instead
• D.ktpass /create /princ HTTP/[email protected] /mapuser [email protected] /crypto AES256-SHA1 /ptype KRB5_NT_PRINCIPAL /pass twspass

Comment: *

Name: *

Email: *

Verification: *

HCL HWA 10.2 Liberty auditbox.msg shows 3800 "Access denied" during Dynamic Workload Broker REST API calls from DWC. TWS_home/trace/appservman.*.trc empty. BrokerWorkstation.properties restApiEnabled=YES. What audit+trace enabling diagnoses API authorization?

• A.localopts enLibertyAudit=DETAILED; appservman traceLevel=DEBUG; recycle Liberty
• B.DWC config auditCapture=API; refresh
• C.BrokerWorkstation.properties: apiAuditLevel=SECURITY
• D.globalopts AUDIT_API=VERBOSE; conman "startaudit liberty"

Comment: *

Name: *

Email: *

Verification: *

Enterprise performs HCL Workload Automation 10.2 typical installation for consolidated scheduling but post-install CPU wait spikes 85% during plan switch despite 40 cores idle. iotop shows db2sysc 95% I/O wait on /db filesystem. XFS mount defaults. Which server installation storage tuning using precise mount options eliminates I/O starvation?

• A.mount -t tmpfs -o size=64G tmpfs /db; sysctl vm.nr_hugepages=16384 for DB2 bufferpool
• B.mkfs.xfs -m crc=1,finobt=1 -d su=64k,sw=16 -l su=64k,sw=16 /dev/db; mount -o allocsize=64k /db
• C.lvcreate -L 500G -i 8 -I 64K vg_db /dev/md0; mkfs.xfs -d sunit=128,swidth=1024 /dev/vg_db/lv_db
• D.mount -o inode64,noatime,discard,allocsize=1M /dev/nvme0n1p2 /db; echo 1024 > /sys/block/nvme0n1/queue/nr_requests

Comment: *

Name: *

Email: *

Verification: *