Do not you know how to choose the Apple 9L0-620 exam dumps? Being worried about your Apple 9L0-620 exam? Just try Flydumps new version Apple 9L0-620 exam dumps.High pass rate and money back guarantee!

QUESTION 86
You are configuring an LDAP connection on a Mac OS X computer, you created a custom mapping between Open Directory and LDAP attributes. Where does Mac OS X v10.5 store the custom mapping that the LDAP plug-in uses?
A. /Library/Preferences/com.apple.directoryservices.plist
B. /Library/Preferences/SystemConfiguration/preferences.plist
C. /Library/Preferences/DirectoryServices/DSLDAPv3PlugInConfig.plist
D. /Library/Application Support/Directory Access/LDAPv3/Templates/mappings.plist

Correct Answer: C QUESTION 87
How to create an Open Directory replica on a server named “mainserver.Real-Exams.net Company”?
A. You should use the command dscl localhost -createreplica /LDAPv3/mainserver.Real-Exams.net Company
B. You should use the command dscl localhost -startreplicator /LDAPv3/mainserver.Real-Exams.net Company
C. You should use the command slapconfig -createreplica mainserver.Real-Exams.net Company diradmin ‘Directory Administrator’ 1000
D. You should use the command slapconfig -startreplicator mainserver.Real-Exams.net Company diradmin ‘Directory Administrator’ 1000

Correct Answer: C QUESTION 88
You can use____ to map an Open Directory record to an LDAP record?
A. Directory Utility

Correct Answer: A QUESTION 89
Please point out which keys are stored in a Kerberos service principal?
A. The public keys used to encrypt the TGT
B. The public keys used to initiate an SSL connection
C. The secret keys use to authenticate the user with the KDC
D. The secret keys used to authenticate a server with the KDC

Correct Answer: D QUESTION 90
You have started up a Mac OS X v10.5 computer in single-user mode. In this mode, How to edit a user in the /Local/Default directory domain?
A. You should use the command-line tool vi
B. You should use the command-line tool ls
C. You should use the command-line tool plutil
D. You should use the command-line tool slapadd

Correct Answer: A QUESTION 91
You are reviewing the Directory Service log file on your Mac OS X Server v10.5 computer, you see error number -14002 listed. How to discover the meaning of this error number?
A. You should enter the command dserr -14002 in Terminal
B. You should enter the command dscl -e 14002 in Terminal
C. You should enter the command cat /var/db/err | grep 14002 in Terminal
D. You should enter the command DirectoryService -error 14002 in Terminal

Correct Answer: A QUESTION 92
Mike logs into a Mac OS X v10.5 computer using a non-administrator network user account hosted on a Mac OS X Server v10.5 computer. The user account is configured to use an Open Directory password. When Mike tries to connect to an AFP server that is configured to use only Kerberos authentication, an “Authenticate to Kerberos” dialog appears, requesting a name, realm, and password. Mike enters a valid user account name, realm, and password, and clicks OK. The same dialog reappears. How should a local system administrator resolve this issue?
A. Delete the System keychain on the Mac OS X client computer.
B. Use Directory Access on the Mac OS X client computer to enable the Kerberosv5 plug-in.
C. Run kdestroy on the Mac OS X client computer to destroy any existing tickets in the client computer’s cache.
D. Use Date & Time Preferences on the Mac OS X client computer to set the client’s date, time, and time zone to match the KDC.

Correct Answer: D QUESTION 93
In Mac OS X v10.5, dscl makes requests through DirectoryService.
A. TRUE
B. FALSE
Correct Answer: A QUESTION 94
In Mac OS X v10.5, dscl can edit BSD flat files.
A. TRUE
B. FALSE
Correct Answer: B QUESTION 95
In Mac OS X v10.5, dscl shows native data types.
A. TRUE
B. FALSE
Correct Answer: B QUESTION 96
In Mac OS X v10.5, dscl edits the local directory data store without starting another process.
A. TRUE
B. FALSE

Correct Answer: B QUESTION 97
You are configuring a Mac OS X v10.5 computer to use an LDAP server for login window authentication. Which Open Directory user attribute must you map to an LDAP user attribute?
A. You must map GID to an LDAP user attribute
B. You must map MCXFlags to an LDAP user attribute
C. You must map RecordName to an LDAP user attribute
D. You must map AuthenticationAuthority to an LDAP user attribute

Correct Answer: C QUESTION 98
Which log file can you use to troubleshoot directory service promotion issues?
A. slapd.log
B. slurpd.log
C. slapconfig.log
D. ldapaccess.log

Correct Answer: C QUESTION 99
Which process provides directory services in Mac OS X v10.5?
A. slapd
B. lookupd
C. OpenDirectory
D. DirectoryService

Correct Answer: D QUESTION 100
What happens when you make changes to the LDAP and Password Server databases on a Mac OS X v10.5 Open Directory replica using Workgroup Manager?
A. Changes to the LDAP and Password Server databases on the replica are redirected to the Open Directory master.
B. Changes to the LDAP and Password Server databases on the replica are stored on the replica’s LDAP database and are forwarded on to the master.
C. Changes to the LDAP database on the replica are stored in the local LDAP database and are forwarded on to the master; password changes are simply redirected to the master.
D. Changes to the LDAP database on the replica are redirected to the Open Directory master; password changes are stored in the local Password Server database and are forwarded on to the master.

Correct Answer: D QUESTION 101
A Mac OS X v10.5 client computer is bound to an Active Directory server providing user records and an Open Directory server providing user augment records. Which statement is true about this configuration?
A. The augment records can provide additional attributes to the user records provided by the Active Directory server.
B. The augment records can provide additional record types to the user records provided by the Active Directory server.
C. Attributes in the augment records on the Open Directory server will override conflicting attributes in the user records on the Active Directory server.
D. When an augment record has the same name as an Active Directory user record, Mac OS X uses the augment record in place of the Active Directory record.

Correct Answer: A QUESTION 102
On a Mac OS X v10.5 computer, which file is consulted by the BSD plugin for user authentication?
A. /etc/groups
B. /etc/master.passwd
C. /var/db/dslocal/nodes/BSD/Users/root.plist
D. /var/db/dslocal/nodes/Default/Users/root.plist

Correct Answer: B QUESTION 103
Please point out which keys are stored in a Kerberos service principal?
A. The public keys used to encrypt the TGT
B. The public keys used to initiate an SSL connection
C. The secret keys use to authenticate the user with the KDC
D. The secret keys used to authenticate a server with the KDC

Correct Answer: D QUESTION 104
You are reviewing the Directory Service log file on your Mac OS X Server v10.5 computer, you see error number -14002 listed. How to discover the meaning of this error number?
A. You should enter the command dserr -14002 in Terminal
B. You should enter the command dscl -e 14002 in Terminal
C. You should enter the command cat /var/db/err | grep 14002 in Terminal
D. You should enter the command DirectoryService -error 14002 in Terminal

Correct Answer: A QUESTION 105
In Mac OS X v10.5, dscl shows native data types.
A. TRUE
B. FALSE Correct Answer: B

Passing Apple 9L0-620 exam questions is guaranteed with Flydumps.com. Flydumps.com provides a great deal of Apple 9L0-620 preparation resources mend to step up your career with the endorsement of technical proficiency. The earlier you use Flydumps.com products, the quicker you pass you Apple 9L0-620 exam.

Hi,I just took CCNA Apple 9L0-620 test and passed with a great score.All examcollection and securitytut dump are no longer valid anymore.I recommend studying Exampass Premium VCE.I can confirm that all Apple 9L0-620 new questions appear on my test. Keep up the good work and good luck!

QUESTION 50
Which is a valid storage location for the file named “openldap-withstatic.plist”?
A. /etc/openldap/templ/
B. /var/db/dslocal/Default/mappings/
C. /Library/Preferences/DirectoryService/
D. /Library/Application Support/Directory Access/LDAPv3/Templates/

Correct Answer: D QUESTION 51
Please point out which process on an Open Directory replica receives notification of changes to an Open Directory master?
A. repld
B. slapd
C. slurpd
D. slapcatd

Correct Answer: B QUESTION 52
Please point out which data is replicated from an Open Directory master to an Open Directory replica?
A. System keychain
B. Kerberos public keys
C. BSD directory domain
D. LDAP directory domain

Correct Answer: D QUESTION 53
By setting the authentication search policy in Directory Utility, you set the order in which different directory domains are searched for account records
A. TRUE
B. FALSE
Correct Answer: A QUESTION 54
By setting the authentication search policy in Directory Utility, you set authentication policies for user accounts, such as password length
A. TRUE
B. FALSE
Correct Answer: B QUESTION 55
By setting the authentication search policy in Directory Utility, you set the password hashes that are allowed for login window authentication
A. TRUE
B. FALSE
Correct Answer: B QUESTION 56
By setting the authentication search policy in Directory Utility, you set the order in which user certificates are searched for public key authentication methods
A. TRUE
B. FALSE

Correct Answer: B QUESTION 57
You want to promote a standalone Mac OS X Server v10.5 computer to an Open Directory master. If the server has the DNS name “mainserver.Real-Exams.net Company”, How to perform the promotion?
A. You should use the command slapconfig -promote mainserver.Real-Exams.net Company
B. You should use the command ldapconfig -a mainserver.Real-Exams.net Company -u diradmin -p password
C. You should use the command ldapconfig -createldapmaster dc=mainserver,dc=Real-Exams.net,dc=com MAINSERVER.Real-Exams.net Company
D. You should use the command slapconfig -createldapmasterandadmin diradmin ‘Directory Admin’ 1000 dc=mainserver,dc=Real-Exams.net,dc=com MAINSERVER.Real-Exams.net Company

Correct Answer: D QUESTION 58
When should you use dseditgroup rather than dscl?
A. When you need to edit the Directory ACLs for your groups.
B. When you need to edit both the local and network directory domains.
C. When you need a GUID to be created automatically for new group records.
D. When you need to edit groups that reside in an Active Directory directory domain.

Correct Answer: C QUESTION 59
What information you can find in a TGT from a KDC?
A. The public key for the KDC
B. The user account password
C. The service key for all kerberized services
D. The date and time that the TGT was issued

Correct Answer: D
QUESTION 60
Please point out what is a Kerberos user principal?
A. Kerberos user principal is an entry in the local Keychain database that contains the private keys for a particular Kerberos user
B. Kerberos user principal is an entry in the LDAP database that contains the identification information for a particular Kerberos user
C. Kerberos user principal is an entry in the KDC database that contains the authentication information for a particular Kerberos user
D. Kerberos user principal is an entry in the local Directory Services database that contains the identification information for a particular Kerberos user

Correct Answer: C
QUESTION 61
You configure one Mac OS X v10.5 client computer to search both an Open Directory server and an Active Directory server for user authentication information. How does Mac OS X on the client computer perform the search?
A. Mac OS X only searches the Open Directory server. If the user is not found there, the user is not authenticated.
B. Mac OS X searches the Open Directory server first. If the user is not found there, Mac OS X searches the Active Directory server.
C. Mac OS X searches the directory that is listed first in the search path. If the user is not found there, the user is not authenticated.
D. Mac OS X searches the directory that is listed first in the search path. If the user is not found there, Mac OS X searches the next directory in the search path.

Correct Answer: D
QUESTION 62
You want to use a third-party LDAP server to support your Mac OS X v10.5 client computers, but the LDAP server needs additional data in order to do so. What are THREE ways to provide the missing data?
A. You should enter the missing data on the client computers as a schema addition in /etc/openldap.
B. You should enter the missing data on the client computers as static attribute values using the LDAP plug-in.
C. You should enter the missing data on the LDAP server in value fields of unused attributes that have compatible value types.
D. You should modify the directory schema on the third-party LDAP server, and enter the missing data in the new attributes in the schema.

Correct Answer: BCD
QUESTION 63
You use Directory Utility to bind a Mac OS X v10.5 client computer to an Active Directory server. What role does the client’s computer ID, “Mac1”, play in the binding process?
A. The client computer edits the AllowedClients attribute to include the value “Mac1”.
B. The client computer creates a computer record named “Mac1” in the Active Directory service.
C. The client computer uses the value of the KerberosPrincipal property inside a computer record called “Mac1” for SMB authentication.
D. The client computer checks the attributes of the AllowedClients record to verify that “Mac1” is allowed to bind to the Active Directory domain.

Correct Answer: B
QUESTION 64
You have configured a Mac OS X v10.5 computer for trusted binding to an Open Directory master. Which step takes place as part of the trusted binding process?
A. A computer record for the client is created on the Open Directory master.
B. User principals are downloaded from the Open Directory master to the client for the local KDC.
C. The search path order is downloaded from the Open Directory master to the client, and configured on the client.
D. SSL certificates are downloaded from the Open Directory master to the client to establish an encrypted connection.

Correct Answer: A
QUESTION 65
Which of the following statement exactly describe the architecture of an Open Directory replica system in Mac OS X Server v10.5?
A. An Open Directory master can have 64 replicas. Replicas cannot replicate other replicas.
B. An Open Directory master can have 1024 replicas. Replicas cannot replicate other replicas.
C. An Open Directory master can have 32 replicas, and each replica can have another 32 replicas.
D. An Open Directory master can have 64 replicas, and each replica can have another 64 replicas.

Correct Answer: C
QUESTION 66
You use the Server Admin to configure a Mac OS X Server v10.5 computer located at server.Real-Exams.net Company to provide directory information via LDAP. What is the default search base?
A. ou=server,o=Real-Exams.net,o=com
B. ou=server,ou=Real-Exams.net,ou=com
C. dc=server,dc=Real-Exams.net,dc=com
D. ou=server,dc=Real-Exams.net,dc=com

Correct Answer: C
QUESTION 67
A network user account named “Mike” is stored on an LDAP server. On a Mac OS X client computer whose computer name is “Mac1”, a user enters valid authentication information for the network account, but the login fails. From another Mac OS X client computer, “Mac2”, logging in with the same authentication information succeeds. What might be causing the problem on Mac1?
A. lookupd has quit on Mac1.
B. Mac1 does not have the LDAP schema extensions installed.
C. The user account’s password hash is not supported on Mac1.
D. Another account named “Mike” with a different password is stored in the local directory domain of Mac1.
Correct Answer: D
QUESTION 68
How to view cached Kerberos service tickets?
A. You should use the command-line tool kinit
B. You should use the command-line tool klist
C. You should use the command-line tool ktutil
D. You should use the command-line tool kadmin

Correct Answer: B
QUESTION 69
How to create a new user in the /BSD/local directory domain on a Mac OS X v10.5 computer?
A. You should use the tool dscl
B. You should use the tool vipw
C. You should use the tool dsaddusr
D. You should use the tool Workgroup Manager

Correct Answer: B
QUESTION 70
You set up an Open Directory master and a replica, and verified that both are available on the network. How do you configure a Mac OS X v10.5 client computer to bind to the current Open Directory master, and to look for the replica if the master becomes unavailable?
A. You should configure the Open Directory master to specify the replica address using managed client settings. Then bind the client to the Open Directory master with Directory Utility.
B. You should bind the client to the Open Directory master. The binding process will provide the client with the address of the replica that the client will use if it cannot contact the master.
C. You should configure the Open Directory master to specify the replica address using managed client settings. Allow the master and replica to sync at least once, and then bind the client to the Open Directory replica.
D. You should bind the client to the Open Directory replica. The binding process will provide the client with the address of the master, and the client will automatically look for the master before looking for the replica.

Correct Answer: B
QUESTION 71
What is the main difference between ldapmodify and slapadd?
A. slapadd can import LDIF files, but ldapmodify cannot.
B. ldapmodify can import LDIF files, but slapadd cannot.
C. slapadd can safely add records while the slapd daemon is running, but ldapmodify cannot.
D. ldapmodify can safely add records while the slapd daemon is running, but slapadd cannot.

Correct Answer: D
QUESTION 72
You are configuring your Mac OS X v10.5 client computers to access a third-party directory. You want to provide the client computers with mount records, without modifying the schema on the third-party directory. What should you do?
A. You should use Directory Utility to map VFSType to apple-user-homeurl on each client computer.
B. You should use the Active Directory schema rather than the RFC 2307 schema on the LDAP directory.
C. You should use Workgroup Manager to connect directly to the LDAP directory and create mount records.
D. You should supplement the third-party directory with a directory on Mac OS X Server to host the mount records.
Correct Answer: D QUESTION 73
Windows PDC allows Windows computers to use a network user account for logins.
A. TRUE
B. FALSE
Correct Answer: A QUESTION 74
Windows PDC provides Windows user account information to Open Directory replicas.
A. TRUE
B. FALSE
Correct Answer: B QUESTION 75
Windows PDC provides managed client settings to Macintosh clients bound to an Active Directory server.
A. TRUE
B. FALSE
Correct Answer: B QUESTION 76
Windows PDC provides authentication for a Mac OS X Server computer bound to an Active Directory server.
A. TRUE
B. FALSE

Correct Answer: B QUESTION 77
You create an LDAP configuration in Directory Access that maps the local UniqueID attribute to #3600. What will happen after that?
A. All user accounts provided by that LDAP configuration will have a UniqueID of 3600.
B. The directory server will only find and return user accounts that contain a UniqueID that ends in 3600.
C. The UniqueID and GeneratedUID values for user accounts provided by that LDAP configuration on that computer will be synchronized hourly.
D. Each new user account created on that computer is assigned a UniqueID value, starting at 3600, and incrementing the UniqueID value by 1 for each subsequent new account.

Correct Answer: A QUESTION 78
You want to add a third-party FTP server to the Kerberos realm hosted on your Open Directory master. Which TWO steps are required to accomplish your goal?
A. You should add a user principal to the keytab file on the FTP server.
B. You should add a service principal to the keytab file on the FTP server.
C. You should edit the user principals on the Open Directory master to support FTP.
D. You should add a service principal for the FTP service to the KDC on the Open Directory master.

Correct Answer: BD QUESTION 79
Please describe Kerberos keytab file contains secret keys for________.
A. user principal
B. KDC principal
C. client principal
D. service principal

Correct Answer: D QUESTION 80
You can use slapconfig to promote a Mac OS X Server computer to an Open Directory master
A. TRUE
B. FALSE
Correct Answer: A QUESTION 81
You can use slapconfig to edit the LDAP schema on a Mac OS X Server computer
A. TRUE
B. FALSE
Correct Answer: B QUESTION 82
You can use slapconfig to bind a Mac OS X computer to an Active Directory server
A. TRUE
B. FALSE
Correct Answer: B QUESTION 83
You can use slapconfig to configure LDAP record mapping on a Mac OS X computer
A. TRUE
B. FALSE

Correct Answer: B QUESTION 84
How should you configure a Mac OS X v10.5 client computer to require packet signing when it accesses an Active Directory server?
A. You should select “Digitally sign all packets” in Directory Utility.
B. You should enter the command dsconfigad -packetsign require in Terminal.
C. You should enable “Require Active Directory packet signing” in the Kerberos preferences.
D. You should enter the command dscl localhost -create /Config/ADPacketSign require in Terminal.

Correct Answer: B QUESTION 85
Based on the above pictures. How should you do to prevent the user Doug Doe from editing user information of members of the students group?
A. You should use Directory Access Controls (DACs) to limit Doug Doe’s read and write access to records in the directory.
B. You should use Network Access Control Lists (NACLs) to block Doug Doe’s access to Open Directory administration on the server.
C. You should use File system Access Control Lists (ACLs) to limit Doug Doe’s read and write access to configuration files on the server.
D. You should use Service Access Control Lists (SACLs) to prevent Doug Doe’s connection to Open Directory administration services on the server.

Correct Answer: A

Our material on our site Apple 9L0-620 is exam-oriented,keeping in view the candidates requirements and level of understanding.Apple 9L0-620 materials are in the most popular and easy-to-use PDF version. You can use it on any devices with you anywhere.