Restrict access scenario: HCL HWA 10.2 MDM receives unauthorized conman connections from jump host 192.168.1.100. tcpdump shows successful SSL handshake but authentication failure. What MDM configuration blocks pre-authentication?

• A.firewall-cmd --permanent --add-rich-rule='rule family="ipv4" source address="192.168.1.100" port protocol="tcp" port="31114" reject'
• B.netman.conf: restricted_ips=192.168.1.100/32 action=reject
• C.iptables -I INPUT -s 192.168.1.100 -p tcp --dport 31114 -j REJECT
• D.localopts SSL_CLIENT_AUTH=REQUIRED; optman mod _TCPIP_CLIENT_AUTH=YES

Comment: *

Name: *

Email: *

Verification: *

For DB2 connection parameters in HCL Workload Automation 10.2, which additional setting enables SSL access from CLI commands?

• A.sslConnection=true in command-line config
• B.SSLConfigFile in localopts
• C.dbSSL=true in global options
• D.enableSSL in datasource.xml

Comment: *

Name: *

Email: *

Verification: *

HCL HWA 10.2 conman displays truncated joblist: 1000/5000 jobs shown. conman "dj @" pagination issue. What command shows complete joblist without truncation?

• A.conman "dj @ -pagesize=5000"
• B.conman "fulljobs @"
• C.conman "dj @ -limit=0"
• D.conman "dj @ -all"

Comment: *

Name: *

Email: *

Verification: *

A high-availability HCL Workload Automation 10.2 cluster spanning three data centers requires automatic failover between MDM1 (primary) and MDM2 (backup) with heartbeat monitoring every 30 seconds and failover timeout of 5 minutes. During testing, failover succeeds but the production plan lags 2 hours behind due to clock skew. Which failover configuration parameter synchronizes plan time across failover nodes while enforcing strict heartbeat validation?

• A.conman "configure failover MDM2 heartbeat=30 timeout=300 syncplan=true"
• B.alter domain failover.heartbeat=30s failover.timeout=5m clock.sync=true
• C.Set [Failover] heartbeat.interval=30s timeout=300000ms in shared JobManager.ini
• D.modify switchmgr auto=MDM2 monitor=30s maxlag=120m timesync=force

Comment: *

Name: *

Email: *

Verification: *

HCL HWA 10.2 SSO certificate authentication with client certificates fails role mapping: "CN=john.doe not mapped to TWSUser role". Liberty server.xml maps CN to user but groups missing. Required userRegistry configuration?

• A.<basicUserRegistry id="certUsers"><group name="TWSUsers"><user name="CN=john.doe"/></group></basicUserRegistry>
• B.LDAP required for certificate group mapping
• C.server.xml: <sslClientAuth id="clientAuth" mapToUser="CN=(.*), OU=(.*)" />
• D.Certificate roles extracted from X509 extension automatically

Comment: *

Name: *

Email: *

Verification: *