APPLE 9L0-505

1.You want to restrict managed user Jim from using Safari in the local /Applications directory on a managed computer to which he has access. Which of these are valid ways to accomplish this goal? (Choose all that apply.)
A.Using the Get Info window, lock Safari on Jim's computer.
B.Using Workgroup Manager, disable Jim's ability to open applications on the local volume.
C.Using Workgroup Manager, remove Safari from the list of Jim's allowed applications.
D.Using the Get Info window for Safari, set the application's privileges to None for user Jim.
E.Using Workgroup Manager, set up Safari to require an administrator password for launching.
Correct:B C
2.Which TWO statements are true of mobile user accounts? (Choose TWO.)
A.A mobile user account works on iBook and PowerBook computers only.
B.Account information is stored both in a shared domain and locally, on the user's computer.
C.You create a mobile user by selecting "Mobile User" in the Advanced pane of Workgroup Manager.
D.A mobile user has two home folders, a local folder and a network folder, both of which Mac OS X Server v10.3 keeps synchronized, so they contain the same set of data.
E.If not connected to a network, a mobile user logs in to his computer using the local copy of the mobile account information. When connected to the network, however, the operating system authenticates the user using the account information stored on a shared domain.
Correct:B E
3.What is the MAXIMUM number of computers you can import into a computer list?
A.3,000
B.2,000
C.700
D.99
E.10
Correct:B
4.Tim has a network user account on a Mac OS X Server v10.3 computer. The system administrator has given Tim a disk quota of 100 MB. This quota applies only to files that are owned by ________, and are located ________.
A.Tim; in Tim's home folder
B.any user; in Tim's home folder
C.Tim; on the partition where Tim's home folder resides
D.Tim; on the share point where Tim's home folder resides
Correct:C
5.What is one reason to prefer an AFP share point over an NFS share point for storing home directories?
A.NFS volumes must be mounted manually.
B.AFP volumes are easier to search than NFS volumes.
C.AFP provides user-level authentication access security.
D.NFS share points do not support group-level Read & Write permissions.
Correct:C
6.You manage the Dock position for user Sarah so it appears on the left of her screen. You manage the Dock position for the workgroup, Arts, of which Sarah is a member, so that the Dock appears on the right side of members' screens. Where does the Dock appear when Sarah logs in as a member of the Arts workgroup?
A.left side of the screen
B.right side of the screen
C.When there is a conflict between user and workgroup preferences, the default value of the preference is used. The default Dock position is at the bottom of the screen.
D.If you are managing the Dock position for the computer list account in which the Arts workgroup is a member, the Dock position will be the same as the one defined for the computer list. If you are not managing the Dock position for the computer list, the Dock appears on the right.
Correct:A
7.You have defined managed preferences for the Guest Computers account in Workgroup Manager. Those preferences apply to ________.
A.computers named on the Guest Computers list, only
B.any computer from which a user connects to the server with Guest access
C.any computer that is not a member of a named computer list on the server
D.computers that are members of computer lists that have Guest access to the server
Correct:C
8.Which are valid methods for starting up a Mac OS X client computer from a NetBoot disk image? (Choose all that apply.)
A.Hold down the N key when starting up the computer.
B.Hold down the Command-Option-P-R keys when starting up the computer.
C.Select a specific NetBoot disk image in the Startup Disk pane of System Preferences.
D.Choose "Start from NetBoot Disk Image" from the Login Items pane of System Preferences.
E.Hold down the Shift key when starting up, and choose a NetBoot server from the Startup Manager screen's pop-up menu.
Correct:A C
9.The NetBoot Filters feature in Mac OS X Server v10.3 lets you ________.
A.look up the IP address of a computer, based on its host name
B.deny NetBoot access to select computers, based on their IP address
C.allow NetBoot access to select computers, based on their IP address
D.allow NetBoot access to select computers, based on their hardware address
Correct:D
10.Which of these computers can start up from a NetBoot image hosted by Mac OS X Server v10.3? (Choose all that apply.)
A.Power Macintosh G3 (233 MHz, beige model)
B.Power Macintosh G3 (Blue & White)
C.iMac G3 (Tray Loading)
D.iMac (Slot Loading)
E.Power Mac G4
F.Power Mac G5
G.Xserve
H.iBook
Correct:D E F G H
11.Your NetBoot server contains two NetBoot disk images, one for Mac OS X and one for Mac OS X Server v10.3. You have designated the Mac OS X disk image as the default. Which of these is true for a client computer that has never used NetBoot before?
A.Only the Mac OS X disk image appears in the Startup Disk pane of System Preferences on the client.
B.If you hold down the N key while starting up the client, it will start up from the Mac OS X disk image.
C.The client cannot start up from the Mac OS X Server disk image until it has started up from the Mac OS X disk image at least once.
D.If you hold down the N key while starting up the client, the Mac OS X disk image will be the highlighted choice on the Startup Manager screen.
Correct:B
12.You are creating an SMB share point on a server with Mac OS X Server v10.3. Users on client computers will create files and folders on the share point. Which statements are true of newly created files and folders? (Choose all that apply.)
A.You can assign permissions on shared files.
B.Shared files' permissions are defined by the umask.
C.You can set shared files to inherit permissions from the parent folder.
D.Owner and Group always get Read & Write permissions to shared files.
E.The permissions you set for files and folders only apply to Mac OS X client computers.
Correct:A C
13.In Mac OS X Server v10.3, you should enable strict locking when you are sharing a volume over ________.
A.FTP only
B.AFP only
C.SMB only
D.AFP and FTP
E.AFP and SMB
Correct:E
14.Sharing files over NFS is NOT secure because NFS ________.
A.relies on Kerberos
B.uses cleartext passwords
C.uses MAC address authentication
D.does not require user authentication
Correct:D
15.By default, FTP service in Mac OS X Server v10.3 can ________ files on the fly, at the time the files are requested. (Choose all that apply.)
A.install
B.encode
C.archive
D.encrypt
E.compress
F.unencrypt
Correct:B C E
16.Using the Windows service in Server Admin, Mac OS X Server v10.3 can be configured to ________. (Choose all that apply.)
A.allow Guest access
B.reshare NFS volumes
C.be an Active Directory server
D.be a Primary Domain Controller
E.be a member of a Windows workgroup
Correct:A D E
17.Using Server Admin, which browsing protocols can you enable for Apple File Service? (Choose all that apply.)
A.NFS
B.SMB
C.AppleTalk
D.Rendezvous
E.Open Directory
Correct:C D
18.On an AFP share point, default permissions for new files and folders are the same as ________.
A.CIFS permissions
B.NTFS permissions
C.Mac OS 9 permissions
D.standard UNIX permissions
Correct:D
19.On your server that has Mac OS X Server v10.3, you configure a firewall that allows web service for the IP address range 10.1.7.6/24 only. Which THREE of these addresses will be DENIED access to the web server? (Choose THREE.)
A.10.1.7.6
B.10.2.7.6
C.10.1.7.8
D.10.1.9.6
E.17.1.7.6
F.10.1.7.24
Correct:B D E
20.On your server that has Mac OS X Server v10.3, you configure a firewall that allows web service for the IP address range 10.1.7.6/16 only. Which of these addresses will be DENIED access to the web server? (Choose all that apply.)
A.10.1.7.6
B.10.2.7.6
C.10.1.7.8
D.10.1.9.6
E.17.1.7.6
Correct:B E
21.Which tool do you use to configure an Open Directory Master?
A.Server Admin
B.Directory Access
C.Workgroup Manager
D.Open Directory Admin
Correct:A
22.If a user or a service that uses Kerberos experiences authentication failures, which of these steps should you try to solve the problem?
A.Change the IP address of the user's computer.
B.View the user's Kerberos ticket using Console.
C.Make sure that KDC is running on the user's system.
D.Make sure that the clocks for all computers are synchronized using a network time server.
Correct:D
23.In Mac OS X Server v10.3, you use ________ to configure access to a directory system.
A.Server Admin
B.Directory Access
C.Workgroup Manager
D.Open Directory Admin
E.Open Directory Assistant
Correct:B
24.Open Directory is compatible with ________. ? (Choose THREE.)
A.LDS on a UNIX server
B.Samba running on Windows
C.NetInfo running on Windows 2000
D.locally stored BSD configuration files
E.Active Directory service on a Microsoft Windows server
F.OpenLDAP or other LDAP service on third-party servers
Correct:D E F
25.In Mac OS X Server v10.3, Open Directory's built-in authentication authority uses ________. (Choose all that apply.)
A.SSH
B.SASL
C.HTTPS
D.Kerberos
E.Active Directory
Correct:B D
26.Using Open Directory you can ________.
A.enable virtual hosting
B.only authenticate kerberized services
C.manage access to domain name service
D.set up multiple LDAP domains on your network
E.configure Mac OS X Server v10.3 to provide group directory services
Correct:D
27.What information can you find in the Open Directory error and service logs that will help you when troubleshooting Open Directory problems? (Choose THREE.)
A.failed authentication attempts
B.Kerberos authentication authority
C.Kerberos tickets that have been granted
D.failed network resources installation attempts
E.list of Open Directory plug-ins that loaded successfully
F.IP addresses from which an authentication attempt was launched
Correct:A E F
28.Which TWO statements about Open Directory are true? (Choose TWO.)
A.Open Directory is extensible via plug-ins.
B.Open Directory runs on Mac OS X Server only.
C.Open Directory does NOT provide load balancing.
D.You manage Open Directory using Open Directory Assistant.
E.An Open Directory server can function as a Windows Primary Domain Controller.
Correct:A E
29.Which tool lets you define a share point that can be used to store network home folders?
A.Server Admin
B.Directory Access
C.Workgroup Manager
D.Open Directory Admin
Correct:C
30.Kerberos can authenticate users for which THREE Mac OS X Server v10.3 services? (Choose THREE.)
A.AFP
B.FTP
C.SSH
D.SASL
E.QTSS
F.Web services
Correct:A B C