Hi,I just took CCNA Apple 9L0-620 test and passed with a great score.All examcollection and securitytut dump are no longer valid anymore.I recommend studying Exampass Premium VCE.I can confirm that all Apple 9L0-620 new questions appear on my test. Keep up the good work and good luck!
QUESTION 50
Which is a valid storage location for the file named “openldap-withstatic.plist”?
A. /etc/openldap/templ/
B. /var/db/dslocal/Default/mappings/
C. /Library/Preferences/DirectoryService/
D. /Library/Application Support/Directory Access/LDAPv3/Templates/
Correct Answer: D QUESTION 51
Please point out which process on an Open Directory replica receives notification of changes to an Open Directory master?
A. repld
B. slapd
C. slurpd
D. slapcatd
Correct Answer: B QUESTION 52
Please point out which data is replicated from an Open Directory master to an Open Directory replica?
A. System keychain
B. Kerberos public keys
C. BSD directory domain
D. LDAP directory domain
Correct Answer: D QUESTION 53
By setting the authentication search policy in Directory Utility, you set the order in which different directory domains are searched for account records
A. TRUE
B. FALSE
Correct Answer: A QUESTION 54
By setting the authentication search policy in Directory Utility, you set authentication policies for user accounts, such as password length
A. TRUE
B. FALSE
Correct Answer: B QUESTION 55
By setting the authentication search policy in Directory Utility, you set the password hashes that are allowed for login window authentication
A. TRUE
B. FALSE
Correct Answer: B QUESTION 56
By setting the authentication search policy in Directory Utility, you set the order in which user certificates are searched for public key authentication methods
A. TRUE
B. FALSE
Correct Answer: B QUESTION 57
You want to promote a standalone Mac OS X Server v10.5 computer to an Open Directory master. If the server has the DNS name “mainserver.Real-Exams.net Company”, How to perform the promotion?
A. You should use the command slapconfig -promote mainserver.Real-Exams.net Company
B. You should use the command ldapconfig -a mainserver.Real-Exams.net Company -u diradmin -p password
C. You should use the command ldapconfig -createldapmaster dc=mainserver,dc=Real-Exams.net,dc=com MAINSERVER.Real-Exams.net Company
D. You should use the command slapconfig -createldapmasterandadmin diradmin ‘Directory Admin’ 1000 dc=mainserver,dc=Real-Exams.net,dc=com MAINSERVER.Real-Exams.net Company
Correct Answer: D QUESTION 58
When should you use dseditgroup rather than dscl?
A. When you need to edit the Directory ACLs for your groups.
B. When you need to edit both the local and network directory domains.
C. When you need a GUID to be created automatically for new group records.
D. When you need to edit groups that reside in an Active Directory directory domain.
Correct Answer: C QUESTION 59
What information you can find in a TGT from a KDC?
A. The public key for the KDC
B. The user account password
C. The service key for all kerberized services
D. The date and time that the TGT was issued
Correct Answer: D
QUESTION 60
Please point out what is a Kerberos user principal?
A. Kerberos user principal is an entry in the local Keychain database that contains the private keys for a particular Kerberos user
B. Kerberos user principal is an entry in the LDAP database that contains the identification information for a particular Kerberos user
C. Kerberos user principal is an entry in the KDC database that contains the authentication information for a particular Kerberos user
D. Kerberos user principal is an entry in the local Directory Services database that contains the identification information for a particular Kerberos user
Correct Answer: C
QUESTION 61
You configure one Mac OS X v10.5 client computer to search both an Open Directory server and an Active Directory server for user authentication information. How does Mac OS X on the client computer perform the search?
A. Mac OS X only searches the Open Directory server. If the user is not found there, the user is not authenticated.
B. Mac OS X searches the Open Directory server first. If the user is not found there, Mac OS X searches the Active Directory server.
C. Mac OS X searches the directory that is listed first in the search path. If the user is not found there, the user is not authenticated.
D. Mac OS X searches the directory that is listed first in the search path. If the user is not found there, Mac OS X searches the next directory in the search path.
Correct Answer: D
QUESTION 62
You want to use a third-party LDAP server to support your Mac OS X v10.5 client computers, but the LDAP server needs additional data in order to do so. What are THREE ways to provide the missing data?
A. You should enter the missing data on the client computers as a schema addition in /etc/openldap.
B. You should enter the missing data on the client computers as static attribute values using the LDAP plug-in.
C. You should enter the missing data on the LDAP server in value fields of unused attributes that have compatible value types.
D. You should modify the directory schema on the third-party LDAP server, and enter the missing data in the new attributes in the schema.
Correct Answer: BCD
QUESTION 63
You use Directory Utility to bind a Mac OS X v10.5 client computer to an Active Directory server. What role does the client’s computer ID, “Mac1”, play in the binding process?
A. The client computer edits the AllowedClients attribute to include the value “Mac1”.
B. The client computer creates a computer record named “Mac1” in the Active Directory service.
C. The client computer uses the value of the KerberosPrincipal property inside a computer record called “Mac1” for SMB authentication.
D. The client computer checks the attributes of the AllowedClients record to verify that “Mac1” is allowed to bind to the Active Directory domain.
Correct Answer: B
QUESTION 64
You have configured a Mac OS X v10.5 computer for trusted binding to an Open Directory master. Which step takes place as part of the trusted binding process?
A. A computer record for the client is created on the Open Directory master.
B. User principals are downloaded from the Open Directory master to the client for the local KDC.
C. The search path order is downloaded from the Open Directory master to the client, and configured on the client.
D. SSL certificates are downloaded from the Open Directory master to the client to establish an encrypted connection.
Correct Answer: A
QUESTION 65
Which of the following statement exactly describe the architecture of an Open Directory replica system in Mac OS X Server v10.5?
A. An Open Directory master can have 64 replicas. Replicas cannot replicate other replicas.
B. An Open Directory master can have 1024 replicas. Replicas cannot replicate other replicas.
C. An Open Directory master can have 32 replicas, and each replica can have another 32 replicas.
D. An Open Directory master can have 64 replicas, and each replica can have another 64 replicas.
Correct Answer: C
QUESTION 66
You use the Server Admin to configure a Mac OS X Server v10.5 computer located at server.Real-Exams.net Company to provide directory information via LDAP. What is the default search base?
A. ou=server,o=Real-Exams.net,o=com
B. ou=server,ou=Real-Exams.net,ou=com
C. dc=server,dc=Real-Exams.net,dc=com
D. ou=server,dc=Real-Exams.net,dc=com
Correct Answer: C
QUESTION 67
A network user account named “Mike” is stored on an LDAP server. On a Mac OS X client computer whose computer name is “Mac1”, a user enters valid authentication information for the network account, but the login fails. From another Mac OS X client computer, “Mac2”, logging in with the same authentication information succeeds. What might be causing the problem on Mac1?
A. lookupd has quit on Mac1.
B. Mac1 does not have the LDAP schema extensions installed.
C. The user account’s password hash is not supported on Mac1.
D. Another account named “Mike” with a different password is stored in the local directory domain of Mac1.
Correct Answer: D
QUESTION 68
How to view cached Kerberos service tickets?
A. You should use the command-line tool kinit
B. You should use the command-line tool klist
C. You should use the command-line tool ktutil
D. You should use the command-line tool kadmin
Correct Answer: B
QUESTION 69
How to create a new user in the /BSD/local directory domain on a Mac OS X v10.5 computer?
A. You should use the tool dscl
B. You should use the tool vipw
C. You should use the tool dsaddusr
D. You should use the tool Workgroup Manager
Correct Answer: B
QUESTION 70
You set up an Open Directory master and a replica, and verified that both are available on the network. How do you configure a Mac OS X v10.5 client computer to bind to the current Open Directory master, and to look for the replica if the master becomes unavailable?
A. You should configure the Open Directory master to specify the replica address using managed client settings. Then bind the client to the Open Directory master with Directory Utility.
B. You should bind the client to the Open Directory master. The binding process will provide the client with the address of the replica that the client will use if it cannot contact the master.
C. You should configure the Open Directory master to specify the replica address using managed client settings. Allow the master and replica to sync at least once, and then bind the client to the Open Directory replica.
D. You should bind the client to the Open Directory replica. The binding process will provide the client with the address of the master, and the client will automatically look for the master before looking for the replica.
Correct Answer: B
QUESTION 71
What is the main difference between ldapmodify and slapadd?
A. slapadd can import LDIF files, but ldapmodify cannot.
B. ldapmodify can import LDIF files, but slapadd cannot.
C. slapadd can safely add records while the slapd daemon is running, but ldapmodify cannot.
D. ldapmodify can safely add records while the slapd daemon is running, but slapadd cannot.
Correct Answer: D
QUESTION 72
You are configuring your Mac OS X v10.5 client computers to access a third-party directory. You want to provide the client computers with mount records, without modifying the schema on the third-party directory. What should you do?
A. You should use Directory Utility to map VFSType to apple-user-homeurl on each client computer.
B. You should use the Active Directory schema rather than the RFC 2307 schema on the LDAP directory.
C. You should use Workgroup Manager to connect directly to the LDAP directory and create mount records.
D. You should supplement the third-party directory with a directory on Mac OS X Server to host the mount records.
Correct Answer: D QUESTION 73
Windows PDC allows Windows computers to use a network user account for logins.
A. TRUE
B. FALSE
Correct Answer: A QUESTION 74
Windows PDC provides Windows user account information to Open Directory replicas.
A. TRUE
B. FALSE
Correct Answer: B QUESTION 75
Windows PDC provides managed client settings to Macintosh clients bound to an Active Directory server.
A. TRUE
B. FALSE
Correct Answer: B QUESTION 76
Windows PDC provides authentication for a Mac OS X Server computer bound to an Active Directory server.
A. TRUE
B. FALSE
Correct Answer: B QUESTION 77
You create an LDAP configuration in Directory Access that maps the local UniqueID attribute to #3600. What will happen after that?
A. All user accounts provided by that LDAP configuration will have a UniqueID of 3600.
B. The directory server will only find and return user accounts that contain a UniqueID that ends in 3600.
C. The UniqueID and GeneratedUID values for user accounts provided by that LDAP configuration on that computer will be synchronized hourly.
D. Each new user account created on that computer is assigned a UniqueID value, starting at 3600, and incrementing the UniqueID value by 1 for each subsequent new account.
Correct Answer: A QUESTION 78
You want to add a third-party FTP server to the Kerberos realm hosted on your Open Directory master. Which TWO steps are required to accomplish your goal?
A. You should add a user principal to the keytab file on the FTP server.
B. You should add a service principal to the keytab file on the FTP server.
C. You should edit the user principals on the Open Directory master to support FTP.
D. You should add a service principal for the FTP service to the KDC on the Open Directory master.
Correct Answer: BD QUESTION 79
Please describe Kerberos keytab file contains secret keys for________.
A. user principal
B. KDC principal
C. client principal
D. service principal
Correct Answer: D QUESTION 80
You can use slapconfig to promote a Mac OS X Server computer to an Open Directory master
A. TRUE
B. FALSE
Correct Answer: A QUESTION 81
You can use slapconfig to edit the LDAP schema on a Mac OS X Server computer
A. TRUE
B. FALSE
Correct Answer: B QUESTION 82
You can use slapconfig to bind a Mac OS X computer to an Active Directory server
A. TRUE
B. FALSE
Correct Answer: B QUESTION 83
You can use slapconfig to configure LDAP record mapping on a Mac OS X computer
A. TRUE
B. FALSE
Correct Answer: B QUESTION 84
How should you configure a Mac OS X v10.5 client computer to require packet signing when it accesses an Active Directory server?
A. You should select “Digitally sign all packets” in Directory Utility.
B. You should enter the command dsconfigad -packetsign require in Terminal.
C. You should enable “Require Active Directory packet signing” in the Kerberos preferences.
D. You should enter the command dscl localhost -create /Config/ADPacketSign require in Terminal.
Correct Answer: B QUESTION 85
Based on the above pictures. How should you do to prevent the user Doug Doe from editing user information of members of the students group?
A. You should use Directory Access Controls (DACs) to limit Doug Doe’s read and write access to records in the directory.
B. You should use Network Access Control Lists (NACLs) to block Doug Doe’s access to Open Directory administration on the server.
C. You should use File system Access Control Lists (ACLs) to limit Doug Doe’s read and write access to configuration files on the server.
D. You should use Service Access Control Lists (SACLs) to prevent Doug Doe’s connection to Open Directory administration services on the server.
Correct Answer: A
Our material on our site Apple 9L0-620 is exam-oriented,keeping in view the candidates requirements and level of understanding.Apple 9L0-620 materials are in the most popular and easy-to-use PDF version. You can use it on any devices with you anywhere.