Apple 9L0-620 Exam - PassITexam.com

Free 9L0-620 Sample Questions:

Q: 1 You have an Open Directory master with many replicas. The master has had a hardware failure. How should you promote one of the replicas to master and have all the other replicas look to the new master?
A. Using Server Admin, change one of the Open Directory replicas to a master, and then change all of the remaining Open Directory replicas to standalone servers, and back to replicas.
B. Using dsconfigldap, change one of the Open Directory replicas to a master, and then use Server Admin to change all of the remaining Open Directory replicas to standalone servers, and back to replicas.
C. Using Server Admin, change one of the Open Directory replicas to a master, and then change the address of the Open Directory master on all of the remaining replicas, without changing the role of the replicas.
D. Using dscl, change one of the Open Directory replicas to a master, and then use serveradmin to change the address of the Open Directory master on all of the replicas, without changing the role of the replicas.
Answer: A

Q: 2 You are configuring a Mac OS X Server v10.5 computer to search multiple directory domains. How can you specify the order in which the server searches the directories when authenticating users?
A. Define a custom search path in the Authentication pane of Directory Utility.
B. Run slapconfig – setauthmechanisms and specify the directory domain search order.
C. In the Mappings pane of Directory Utility, modify the mapping for the AuthenticationAuthority attribute.
D. In the Advanced pane of Wordgroup Manager, configure the computer account and enter the authentication search path.
Answer: A

Q: 3 In Mac OS X Server v10.5, GeneratedUIDs provide for user identification in which TWO contexts? Choose the two best answers.
A. file ACLs
B. file ownership
C. password policies
D. group membership
E. Kerberos TGT requests
F. CDSA security verification
Answer: A, D

Q: 4 A search base for an LDAP request describes ______.
A. the client application making the search request
B. the location in the LDAP hierarchy where the search will begin
C. the network path to the LDAP server that the request will search
D. the directory services data types that correspond to the LDAP entry being searched
Answer: B

Q: 5 In a default configuration of a Mac OS X v10.5 computer, which folder contains Open Directory logs?
A. ~/Library/Logs/
B. /Var/log/dslocal/
C. /System/Library/Logs/
D. /Library/Logs/DirectoryService/
Answer: D

Q: 6 What type of entry in an LDAP schema defines the record type(s) that the LDAP directory supports?
A. OID base
B. object class
C. syntax definition
D. attribute definition
Answer: B

Q: 7 You want to add a user to an Open Directory master. Which command-line tool lets you do so without requiring that you stop the DirectoryService process to avoid data corruption?
A. dscl
B. slapadd
C. slapconfig
D. slappasswd
E. dsconfigldap
Answer: A

Q: 8 You want a Mac OS X v10.5 computer to mount a network volume dynamically over AFP when users log in to the computer. Which TWO attributes must be defined in the mount record? Choose the two best answers.
A. Export
B. MountDir
C. VFSOpts
D. VFSType
E. VFSMount
F. HomeDirectory
Answer: C, D

Q: 9 In Mac OS X v10.5, how do you enable or disable debug logging for the DirectoryService process?
A. Enter the command killall -USR1 DirectoryService in Terminal.
B. In Server Admin, select Detailed Logging in the Open Directory service pane.
C. Enter the command defaults write com.apple.DirectoryService LogLevel debug in Terminal.
D. Enter the command serveradmin settings dirserv:loggingAttributes:logLevel = “debug” in Terminal.
Answer: A

Q: 10 When a Kerberos client authenticates with a kerberized service, how does the kerberized service determine that the client has a service ticket from an authentic KDC?
A. The service ticket is signed with the KDC’s public key.
B. The service ticket is signed with the user’s private key.
C. The service ticket is encrypted with the service’s public key.
D. The service ticket is encrypted with the service’s private key.
Answer: D

Q: 11 Where in the Mac OS X v10.5 file system are user accounts for the /Local/Default directory domain stored?
A. /var/db/netinfo/local.nidb
B. /etc/openldap/Local/Default
C. /var/db/mysql/dslocal/Default
D. /var/db/dslocal/nodes/Default/users/
Answer: D

Q: 12 A Mac OS X v10.5 computer client is bound to an Open Directory master. How does the client obtain the mapping of standard Directory Service attributes to native LDAP attributes?
A. The client uses mapping information provided in DHCP Option 95.
B. The client performs an LDAP query on the Open Directory master, searching for a record named "macosxodconfig" which contains the mapping.
C. The client performs a series of LDAP queries on the Open Directory master and reviews the whole directory tree, then builds the mapping based on the object classes it finds.
D. The client performs an LDAP query on the Open Directory master, searching for a record named "macosxodschema" which contains the schema. The client builds the mapping from the schema.
Answer: B

Q: 13 You want an OpenLDAP server to support AFP network user logins from Mac OS X v10.5 computers. Which Open Directory attribute must you add to the OpenLDAP schema, and in what format is the attribute's value stored?
A. A UserHome attribute with a value containing a UNC for the AFP server share point
B. An ExportDirectory attribute with a value containing a URL for the AFP server share point
C. An Mount attribute with a value containing a UNC description of the AFP server share point
D. A HomeDirectory attribute with a value containing an XML description of the AFP server share point
Answer: D

Q: 14 In Mac OS X v10.5, which command-line tool should you use to edit local user accounts?
A. dscl
B. nicl
C. addusr
D. ldapmodify
Answer: A

Q: 15 You have an Active Directory server that hosts your user accounts, and an Open Directory server that hosts your managed groups. Which configuration step will allow your client computers to access both the user and group accounts?
A. Add both directories to the search path on the clients.
B. Add Active Directory to the search path on the Open Directory server, and add the Open Directory server to the search path on the clients.
C. Add the Open Directory server to the search path on the clients, and use slapconfig to make the Open Directory server a backup domain controller for the Active Directory server.
D. Add the Open Directory server to the search path on the clients, and use Active Directory Groups and Computers to add the Open Directory server to the Active Directory server’s search path.
Answer: A

Q: 16 What information must a user process in order to configure trusted binding between a Mac OS X v10.5 computer and an Open Directory master?
A. The Kerberos domain name
B. The location of an SSL certificate for the Open Directory LDAP server
C. The name and password of a user account in the Open Directory master
D. The hash types for user accounts contained in the Open Directory master
Answer: C

Q: 17 You have just installed Mac OS X v10.5 on a new computer, and are now binding the computer to a third-party LDAP server. Before mapping Open Directory attributes to LDAP attributes in the LDAPv3 plug-in, you must ______.
A. add the LDAP server to the authentication search path
B. modify your LDAP schema to support native Directory Services data types
C. use Directory Utility to install the Open Directory LDAP schema on your LDAP server, then restart the server
D. create a new LDAP configuration in Directory Utility, and specify the appropriate search base for the LDAP directory
Answer: D

Q: 18 How is the /Local/Default directory domain data stored?
A. In a V100 database
B. In a SQLite database
C. In property-list text files
D. In tab-delimited text files
Answer: C

Q: 19 What does Server Assistant do when you select the Workgroup option for a new Mac OS X Server v10.5 computer?
A. Server Assistant creates an Open Directory master on the new Mac OS X Server computer.
B. Server Assistant creates an Open Directory replica on the new Mac OS X Server computer.
C. Server Assistant creates a standalone server configuration with no support for network users.
D. Server Assistant imports existing users into the /Local/Default directory domain on the new Mac OS X Server computer.
Answer: A

Q: 20 Review the screenshot of a Mac OS X v10.5 computer’s search policy, then answer the question below.

You have configured a Mac OS X v10.5 computer as shown in the screenshot. Your network includes an Open Directory server with augmented user records, and an Active Directory server. How does Mac OS X use the augment records on the Open Directory server to supplement the user records in the Active Directory server?
A. Mac OS X searches the Active Directory server first, and then searches the Open Directory server. If an augment record that matches the user record is found in the Open Directory server, any attributes it includes that are not in the Active Directory user record are added to the Active Directory user record by the client.
B. Mac OS X searches the Open Directory server, and then the Open Directory server sends the query to the Active Directory server. If a matching user record is found in the Active Directory server, all attributes from the Active Directory record are added to the Open Directory augment record, and the results are returned to the client.
C. Mac OS X searches the Active Directory server first, and then searches the Open Directory server. If a matching augment record is found in the Open Directory server, all attributes from both records are merged by the client, and attributes in the Open Directory augment record override conflicting attribute assignments in the Active Directory user record.
D. Mac OS X searches the Open Directory server, and then the Open Directory server sends the query to the Active Directory server. If a matching user record is found in the Active Directory server, any attributes it includes that are not in the Open Directory augment record are added to the Open Directory user record, and the results are returned to the client.
Answer: A