An architect is integrating a customer's AEM authoring system to authenticate with the company's Active Directory (AD) directory service. The architect must configure the LoginModule used by the identity provider.

Which Java security framework should the architect use?

A. OWASP

B. PAM

C. JAAS

D. Apache Shiro

A client acquires multiple companies that operate autonomously and want to use AEM to host all of their

websites.

How should the author users be grouped?

A. Company-specific groups for workflow approval steps and general groups for content editing

B. General groups for workflow approval and content editing

C. Separate company-specific groups for both content editing and workflow approval steps

D. Default AEM groups for workflow approval and company-specific groups for content editing

An architect is helping a multi-national news company design its project and determine requirements. The functionality requires several external feeds to display breaking news and live scores for major sporting events.

What is the most important factor for the architect to consider when meeting the performance requirements?

A. The authentication requirements from each feed

B. The number of JCR nodes each feed item requires

C. The import frequency of the feed

D. The payload type in which the feeds are returned

Which type of architecture diagram should an architect use to present application code and content flow?

A. Deployment

B. Physical

C. Data Flow

D. Logical

A client's security team needs protection from repository content modification outside of its network on its publish servers.

What provides the LEAST protection against this specific threat?

A. Disabling Sling POST Servlet and WebDAV functionality

B. Using Dispatcher filter rules to block access to /apps and /libs

C. Enforcing very strong passwords on all systems and using SSL

D. White-listing specific HTTP methods and URIs required for application functionality