Which two APIs are published by IBM Tivoli Access Manager for Enterprise Single Sign-On IMS Server？（）

Machine policy templates can be assigned based on certain attributes of a machine. A customer  organizes their machines based on the following requirements：  
The machines are all placed in specific Organizational Units in the Active Directory.  
The customer has Citrix Servers， and they have a specific naming convention meant only for their Citrix Servers. The customer has DHCP enabled for all the client machines.  
The customer has made it clear that they should not need to change anything in the existing infrastructure. Given these requirements， which single assignment attribute would be chosen for assigning machine policy templates？（）

In the customer’s environment， a group of five employees work within a room that has three PCs. The PCs have excellent hardware configurations， with considerable RAM and a fast CPU. The employees use these PCs only when they need to access an application， which is for a short duration of time. For the rest of the time， they work with their tools on their desks.
Which IBM Tivoli Access Manager for Enterprise Single Sign-On session management configuration should be used for these three PCs for optimum performance？（）

What are two valid reasons for using IBM Tivoli Access Manager for Enterprise Single Sign-On Graphical Identification and Authentication （GINA）？（）