Directory Services Integration and Administration v10.4 Exam
Index >> Apple >> ACSA >> "9L0-611"Exam
VUE/Prometric Code：9L0-611
Exam Name：Directory Services Integration and Administration v10.4 Exam
Questions and Answers：65 Q&As
Price：$89
Updated：2008-11-12
Questions and Answers：65 Q&As
Price：$89
Updated：2008-11-12
| Directory Services Integration and Administration v10.4 Exam | |||
| Test | Q&A | Updated | Price |
| 9L0-611 | 65 Q&A | 2008-11-12 | $89 |
please download in PDF format Demo:
killtest 9L0-611 Exam Features
High quality and Value for the 9L0-611 Exam.
Killtest Practice Exams for Directory Services Integration and Administration v10.4 Exam 9L0-611 are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development.
100% Guarantee to Pass Your ACSA exam and get your ACSA Certification.
We guarantee your success in the first attempt. If you do not pass the 9L0-611 (Directory Services Integration and Administration v10.4 Exam) on your first attempt we will give you a FULL REFUND of your purchasing fee AND send you another same value product for free.
killtest 9L0-611 Downloadable.
Printable Exams (in PDF format) Our Exam 9L0-611 Preparation Material provides you everything you will need to take your ACSA exam. The ACSA Certification details are researched and produced by Professional Certification Experts who are constantly using industry experience to produce precise, and logical. You may get ACSA exam questions from different web sites or books, but logic is the key. Our Product will help you not only pass in the first ACSA exam try, but also save your valuable time .
- Comprehensive questions with complete details about 9L0-611 exam.
- 9L0-611 exam questions accompanied by exhibits.
- Verified Answers Researched by Industry Experts and almost 100% correct.
- Drag and Drop questions as experienced in the Real ACSA exam.
- 9L0-611 exam questions updated on regular basis.
- Like actual ACSA Certification exams, 9L0-611 exam preparation is in multiple-choice questions (MCQs).
- Tested by many real ACSA exams before publishing.
- Try free ACSA exam demo before you decide to buy it in http://www.Killtest.com.
High quality and Value for the 9L0-611 Exam:100% Guarantee to Pass Your ACSA exam and get your ACSA Certification.
http://www.Killtest.com The safer.easier way to get ACSA Certification.
We offer Demo version of Q&A, Q&A are as follows (not to provide picture):
9L0-611：please download 9L0-611 in PDF format Demo
1.When a Mac OS X client connects to a server for the first time in a Mac OS X Server v10.4 Open Directory replication system, the client FIRST ________.
A.registers itself with each of the replicas
B.adds a search path for Directory Access for one of the servers in the replication system
C.downloads a list of LDAP replicas from the LDAP server for storage in its LDAPv3 Plugin plist file
D.looks at the Password Server public key and references this key to find out what password servers can be used for authentication
Correct:C
2.Which three (3) are Mac OS X Open Directory plug-ins that can request data from a directory service? (Choose THREE.)
A.SMB
B.LDAPv3
C.Bonjour
D.AppleTalk
E.Active Directory
F.BSD Flat File and NIS
Correct:B E F
3.Review the following command: ldapsearch -LLL -x -H ldap://oneserver.example.com -b dc=example,dc=com objectClass=apple-group)?cn objectClass The last two options in this command, cn and objectClass, specify the ________.
A.LDAP entries to exclude from the results
B.attributes to return in the results
C.search filter
D.search base
Correct:B
4.Which is a valid method for optimizing the performance of a server providing Open Directory services?
A.Add memory and increase the BerkeleyDB cache size.
B.Store the Open Directory data and logs on the same disk.
C.Store the Open Directory data and operating system on the same disk partition.
D.Run all services that client computers require on the same server that is providing the Open Directory services.
Correct:A
5.What two pieces of information must be specified in the Active Directory plug-in configuration in order for Mac OS X v10.4 to bind to Active Directory via the Active Directory plug-in? (Choose TWO.)
A.Computer ID
B.Ethernet address
C.Active Directory tree
D.Active Directory forest
E.Active Directory domain
Correct:A E
6.To support Mac OS X clients, you deploy a server running directory services on Mac OS X Server v10.4 to supplement the existing Active Directory services. This solution provides ________.
A.a mechanism for mapping Mac OS X schema to Active Directory
B.a mechanism for storing Microsoft Exchange data in Open Directory
C.a means of managing Windows Group Policy objects from Workgroup Manager in Mac OS X
D.a way to store user principals in Active Directory, and delegate Mac-specific management to Mac OS X Server
Correct:D
7.What are three (3) ways to supplement data that is missing from a third-party LDAP server to support Mac OS X clients? (Choose THREE.)
A.Repurpose existing fields in the directory schema.
B.Modify the server's search path to exclude /NetInfo/root.
C.Create local mappings with static and variable attributes.
D.Remove unused objectClasses from the local directory schema.
E.Enable Option 95 to assure communication with the DHCP server.
F.Modify the schema for the directory on the third-party LDAP server.
Correct:A C F
8.What authentication token does a client present when accessing a kerberized service?
A.the user password
B.a client-generated service ticket
C.a service ticket obtained from the key distribution center (KDC)
D.a ticket-granting ticket (TGT) obtained from the key distribution center (KDC)
Correct:C
9.You want services that are running on Mac OS X Server to accept Kerberos service tickets generated by another server. Which of the following is a valid step to accomplish this in Mac OS X Server v10.4?
A.Enable the Kerberos Open Directory plug-in.
B.Use Server Admin to join the Kerberos realm of the other server.
C.Use NeST to establish a trust relationship with the Kerberos server.
D.Add an /etc/kerberos.conf file to define the correct Kerberos domain and service principal.
Correct:B
10.Which tool uses the DirectoryService process to retrieve directory data?
A.Workgroup Manager
B.NetInfo Manager
C.ldapsearch
D.nicl
Correct:A
11.You have an LDIF file with 1,000 user records from another LDAP server that you want to import into your server without stopping the slapd process. Which of the following commands do you use?
A.NeST
B.ldapadd
C.slapadd
D.slapimport
Correct:B
12.The Mac OS X Server Password Server does NOT ________.
A.support multiple authentication methods
B.enforce password policies such as length and expiration
C.allow non-kerberized services to use a Kerberos session key
D.provide a centralized store of passwords used by multiple servers
Correct:C
13.In Mac OS X Server v10.4, which process is reponsible for managing changes to the Kerberos database?
A.krb5kdc
B.kdcmond
C.kadmind
D.kerberosd
Correct:C
14.You are setting up a new server. When the role in Open Directory services on a computer running Mac OS X Server v10.4 is configured to be a standalone server, ________.
A.directory data is stored in the local LDAP database
B.directory data is stored in the local NetInfo database
C.Password Server is used for password authentication
D.Kerberos service is provided for local user accounts only
Correct:B
15.When configuring Mac OS X Server to search multiple directory services, how do you set the search order?
A.Run ldapsearch.
B.Use Directory Access to modify the directory mappings.
C.Use the Authentication and Contacts panes of Directory Access.
D.Use the Workgroup Manager Advanced pane when setting up a new user.
Correct:C
16.When adding records into an LDAP database using slapdadd, what file format should be used?
A.XML
B.RTF
C.LDIF
D.HTML
Correct:C
17.Which command does Mac OS X Server use to set up the key distribution center (KDC) and configure it to work with Password Server?
A.slapconfig -createldapmaster
B.NeST -convertKDC
C.kadmin.local -q
D.klist -ke
Correct:A
18.You have configured Mac OS X client computers to retrieve user account information from an Active Directory server, and additional directory data from a Mac OS X Server computer. Which is a valid concern for this configuration?
A.A modification to the Active Directory schema is necessary.
B.The ability to manage individual user accounts in Mac OS X is sacrificed.
C.A Mac OS X computer cannot access two directory servers simultaneously.
D.A configured directory on Mac OS X Server must be added to the Active Directory domain.
Correct:B
19.In Mac OS X, Open Directory allows ________.
A.local data to be shared through Directory Access
B.users to access any networked device with a URL
C.network services such as FTP to be started only when requested
D.creation of new plug-ins for integration with other directory services
Correct:D
20.Which statement presents a valid reason for creating two user record branches in a Mac OS X Server LDAP directory?
A.LDAP object classes hold a limited number of fields.
B.Open Directory does not support the inetOrgPerson schema.
C.The NetInfo user account schema does not support extra contact information.
D.You want to separate records used for authentication from records used for contacts.
Correct:D
21.A search base for an LDAP request describes ________.
A.the matching value in searched entries
B.the network address of the LDAP server
C.the point in the data tree where a data search request is started
D.the attribute in the searched entries being matched to the request
Correct:C
22.A Mac OS X v10.4 computer is bound to an Active Directory server using the Active Directory plug-in in Directory Access. Using the default configuration of the plug-in, what is the Mac OS X user ID number for a user account provided by the Active Directory server?
A.It is always set to 500.
B.It is the value stored in the user account UID attribute.
C.The number is generated based upon the user account Globally Unique ID (GUID).
D.It is a randomly generated value that does not conflict with any user IDs used by the local user records.
Correct:C
23.You are promoting Open Directory services on a computer running Mac OS X Server v10.4 from Standalone Server to Open Directory Master. Which statement about the administrator account is true?
A.The primary administrator account in the local NetInfo database is copied to the LDAP database and used as the primary administrator account for the LDAP database.
B.A new administrator account with the name iradmin?is created in the LDAP database and assigned the password from the root account in the local NetInfo database.
C.A new administrator account is created in the LDAP database, and you assign it a name and password.
D.The root account in the local NetInfo database is copied to the LDAP database and used as the primary administrator account for the LDAP database.
Correct:C
24.On a Mac OS X computer configured to retrieve local user account information from BSD flat files, which file contains the user account information?
A./etc/master.passwd
B./etc/services
C./etc/aliases
D./etc/users
Correct:A
25.You have created new client mappings for the LDAPv3 plug-in. One way to make these mappings accessible to other Mac OS X clients is to ________.
A.use the Write to Server option in Directory Access
B.assign users a network home folder using Workgroup Manager
C.assign your new mappings to the VFSLinkDir attribute on the LDAP server
D.use Workgroup Manager to assign the mappings to a computer account list
Correct:A
26.When you define a new LDAP configuration in Directory Access, you might need to enter a distinguished name and password for the connection. The distinguished name is the ________.
A.name of the root user on the server
B.canonical name of a normal user on the Mac OS X client computer
C.short name of a user with administrator permission on the client computer
D.logical path specifying the user record required by your LDAP server to perform queries
Correct:D
27.You disable anonymous binding on the Mac OS X Server LDAP server by ________.
A.adding the following line to the /etc/hostconfig file: LDAPSERVER_BINDANON=-NO-
B.adding the following line to the /etc/openldap/slapd.conf file: disallow bind_anon
C.adding the following line to the /etc/openldap/ldap.conf file: disallow anon_binding
D.issuing the following command to the server: sudo NeST -setLDAPConfig "BIND_ANON" off
Correct:B
28.Which command would create a backup of the key distribution center (KDC)?
A.sudo kdbexport -all > /etc/secured/kdc_backup
B.sudo kdb5_util dump > /etc/secured/kdc_backup
C.sudo kadmin.local -export /etc/secured/kdc_backup
D.kadmin -p diradmin -q kdc_export > /etc/secured/kdc_backup
Correct:B
29.Which statement is NOT true of the krb5kdc process running in Mac OS X Server v10.4?
A.The process is started by launchd.
B.The process reads its configuration data from kdc.conf.
C.The process communicates on UDP and TCP/IP port 88.
D.The process reads its service principals in the local LDAP database.
Correct:D
30.You are using an LDAP browsing utility such as LDapper to browse user records in the LDAP directory served by a Mac OS X Server computer. Which attribute in the LDAP database maps to the UniqueID attribute in an Open Directory user record?
A.uid
B.guid
C.uidNumber
D.apple-generateduid
Correct:C
A.registers itself with each of the replicas
B.adds a search path for Directory Access for one of the servers in the replication system
C.downloads a list of LDAP replicas from the LDAP server for storage in its LDAPv3 Plugin plist file
D.looks at the Password Server public key and references this key to find out what password servers can be used for authentication
Correct:C
2.Which three (3) are Mac OS X Open Directory plug-ins that can request data from a directory service? (Choose THREE.)
A.SMB
B.LDAPv3
C.Bonjour
D.AppleTalk
E.Active Directory
F.BSD Flat File and NIS
Correct:B E F
3.Review the following command: ldapsearch -LLL -x -H ldap://oneserver.example.com -b dc=example,dc=com objectClass=apple-group)?cn objectClass The last two options in this command, cn and objectClass, specify the ________.
A.LDAP entries to exclude from the results
B.attributes to return in the results
C.search filter
D.search base
Correct:B
4.Which is a valid method for optimizing the performance of a server providing Open Directory services?
A.Add memory and increase the BerkeleyDB cache size.
B.Store the Open Directory data and logs on the same disk.
C.Store the Open Directory data and operating system on the same disk partition.
D.Run all services that client computers require on the same server that is providing the Open Directory services.
Correct:A
5.What two pieces of information must be specified in the Active Directory plug-in configuration in order for Mac OS X v10.4 to bind to Active Directory via the Active Directory plug-in? (Choose TWO.)
A.Computer ID
B.Ethernet address
C.Active Directory tree
D.Active Directory forest
E.Active Directory domain
Correct:A E
6.To support Mac OS X clients, you deploy a server running directory services on Mac OS X Server v10.4 to supplement the existing Active Directory services. This solution provides ________.
A.a mechanism for mapping Mac OS X schema to Active Directory
B.a mechanism for storing Microsoft Exchange data in Open Directory
C.a means of managing Windows Group Policy objects from Workgroup Manager in Mac OS X
D.a way to store user principals in Active Directory, and delegate Mac-specific management to Mac OS X Server
Correct:D
7.What are three (3) ways to supplement data that is missing from a third-party LDAP server to support Mac OS X clients? (Choose THREE.)
A.Repurpose existing fields in the directory schema.
B.Modify the server's search path to exclude /NetInfo/root.
C.Create local mappings with static and variable attributes.
D.Remove unused objectClasses from the local directory schema.
E.Enable Option 95 to assure communication with the DHCP server.
F.Modify the schema for the directory on the third-party LDAP server.
Correct:A C F
8.What authentication token does a client present when accessing a kerberized service?
A.the user password
B.a client-generated service ticket
C.a service ticket obtained from the key distribution center (KDC)
D.a ticket-granting ticket (TGT) obtained from the key distribution center (KDC)
Correct:C
9.You want services that are running on Mac OS X Server to accept Kerberos service tickets generated by another server. Which of the following is a valid step to accomplish this in Mac OS X Server v10.4?
A.Enable the Kerberos Open Directory plug-in.
B.Use Server Admin to join the Kerberos realm of the other server.
C.Use NeST to establish a trust relationship with the Kerberos server.
D.Add an /etc/kerberos.conf file to define the correct Kerberos domain and service principal.
Correct:B
10.Which tool uses the DirectoryService process to retrieve directory data?
A.Workgroup Manager
B.NetInfo Manager
C.ldapsearch
D.nicl
Correct:A
11.You have an LDIF file with 1,000 user records from another LDAP server that you want to import into your server without stopping the slapd process. Which of the following commands do you use?
A.NeST
B.ldapadd
C.slapadd
D.slapimport
Correct:B
12.The Mac OS X Server Password Server does NOT ________.
A.support multiple authentication methods
B.enforce password policies such as length and expiration
C.allow non-kerberized services to use a Kerberos session key
D.provide a centralized store of passwords used by multiple servers
Correct:C
13.In Mac OS X Server v10.4, which process is reponsible for managing changes to the Kerberos database?
A.krb5kdc
B.kdcmond
C.kadmind
D.kerberosd
Correct:C
14.You are setting up a new server. When the role in Open Directory services on a computer running Mac OS X Server v10.4 is configured to be a standalone server, ________.
A.directory data is stored in the local LDAP database
B.directory data is stored in the local NetInfo database
C.Password Server is used for password authentication
D.Kerberos service is provided for local user accounts only
Correct:B
15.When configuring Mac OS X Server to search multiple directory services, how do you set the search order?
A.Run ldapsearch.
B.Use Directory Access to modify the directory mappings.
C.Use the Authentication and Contacts panes of Directory Access.
D.Use the Workgroup Manager Advanced pane when setting up a new user.
Correct:C
16.When adding records into an LDAP database using slapdadd, what file format should be used?
A.XML
B.RTF
C.LDIF
D.HTML
Correct:C
17.Which command does Mac OS X Server use to set up the key distribution center (KDC) and configure it to work with Password Server?
A.slapconfig -createldapmaster
B.NeST -convertKDC
C.kadmin.local -q
D.klist -ke
Correct:A
18.You have configured Mac OS X client computers to retrieve user account information from an Active Directory server, and additional directory data from a Mac OS X Server computer. Which is a valid concern for this configuration?
A.A modification to the Active Directory schema is necessary.
B.The ability to manage individual user accounts in Mac OS X is sacrificed.
C.A Mac OS X computer cannot access two directory servers simultaneously.
D.A configured directory on Mac OS X Server must be added to the Active Directory domain.
Correct:B
19.In Mac OS X, Open Directory allows ________.
A.local data to be shared through Directory Access
B.users to access any networked device with a URL
C.network services such as FTP to be started only when requested
D.creation of new plug-ins for integration with other directory services
Correct:D
20.Which statement presents a valid reason for creating two user record branches in a Mac OS X Server LDAP directory?
A.LDAP object classes hold a limited number of fields.
B.Open Directory does not support the inetOrgPerson schema.
C.The NetInfo user account schema does not support extra contact information.
D.You want to separate records used for authentication from records used for contacts.
Correct:D
21.A search base for an LDAP request describes ________.
A.the matching value in searched entries
B.the network address of the LDAP server
C.the point in the data tree where a data search request is started
D.the attribute in the searched entries being matched to the request
Correct:C
22.A Mac OS X v10.4 computer is bound to an Active Directory server using the Active Directory plug-in in Directory Access. Using the default configuration of the plug-in, what is the Mac OS X user ID number for a user account provided by the Active Directory server?
A.It is always set to 500.
B.It is the value stored in the user account UID attribute.
C.The number is generated based upon the user account Globally Unique ID (GUID).
D.It is a randomly generated value that does not conflict with any user IDs used by the local user records.
Correct:C
23.You are promoting Open Directory services on a computer running Mac OS X Server v10.4 from Standalone Server to Open Directory Master. Which statement about the administrator account is true?
A.The primary administrator account in the local NetInfo database is copied to the LDAP database and used as the primary administrator account for the LDAP database.
B.A new administrator account with the name iradmin?is created in the LDAP database and assigned the password from the root account in the local NetInfo database.
C.A new administrator account is created in the LDAP database, and you assign it a name and password.
D.The root account in the local NetInfo database is copied to the LDAP database and used as the primary administrator account for the LDAP database.
Correct:C
24.On a Mac OS X computer configured to retrieve local user account information from BSD flat files, which file contains the user account information?
A./etc/master.passwd
B./etc/services
C./etc/aliases
D./etc/users
Correct:A
25.You have created new client mappings for the LDAPv3 plug-in. One way to make these mappings accessible to other Mac OS X clients is to ________.
A.use the Write to Server option in Directory Access
B.assign users a network home folder using Workgroup Manager
C.assign your new mappings to the VFSLinkDir attribute on the LDAP server
D.use Workgroup Manager to assign the mappings to a computer account list
Correct:A
26.When you define a new LDAP configuration in Directory Access, you might need to enter a distinguished name and password for the connection. The distinguished name is the ________.
A.name of the root user on the server
B.canonical name of a normal user on the Mac OS X client computer
C.short name of a user with administrator permission on the client computer
D.logical path specifying the user record required by your LDAP server to perform queries
Correct:D
27.You disable anonymous binding on the Mac OS X Server LDAP server by ________.
A.adding the following line to the /etc/hostconfig file: LDAPSERVER_BINDANON=-NO-
B.adding the following line to the /etc/openldap/slapd.conf file: disallow bind_anon
C.adding the following line to the /etc/openldap/ldap.conf file: disallow anon_binding
D.issuing the following command to the server: sudo NeST -setLDAPConfig "BIND_ANON" off
Correct:B
28.Which command would create a backup of the key distribution center (KDC)?
A.sudo kdbexport -all > /etc/secured/kdc_backup
B.sudo kdb5_util dump > /etc/secured/kdc_backup
C.sudo kadmin.local -export /etc/secured/kdc_backup
D.kadmin -p diradmin -q kdc_export > /etc/secured/kdc_backup
Correct:B
29.Which statement is NOT true of the krb5kdc process running in Mac OS X Server v10.4?
A.The process is started by launchd.
B.The process reads its configuration data from kdc.conf.
C.The process communicates on UDP and TCP/IP port 88.
D.The process reads its service principals in the local LDAP database.
Correct:D
30.You are using an LDAP browsing utility such as LDapper to browse user records in the LDAP directory served by a Mac OS X Server computer. Which attribute in the LDAP database maps to the UniqueID attribute in an Open Directory user record?
A.uid
B.guid
C.uidNumber
D.apple-generateduid
Correct:C
