Mac OS X Directory Services 10.6: 9L0-624 Exam

• 9L0-624 Questions & Answers
• Exam Code: 9L0-624
• Exam Name: Mac OS X Directory Services 10.6
• Q & A: 72 Q&As

1. Which keys are stored in a Kerberos service principal?
A. The public keys used to encrypt the TGT
B. The public keys used to initiate an SSL connection
C. The secret keys used to facilitate authentication between users and the KDC
D. The secret keys used to facilitate authentication between clients and Kerberized services
Answer: D

2. Which information is contained in a TGT from a KDC?
A. The public key for the KDC
B. The user account password
C. The service key for all Kerberized services
D. The date and time that the TGT was issued
Answer: D

3. Chris logs into a Mac OS X v10.6 computer using a non-administrator network user account hosted on a Mac OS X Server v10.6 computer. The user account is configured to use an Open Directory password.
When Chris tries to connect to an AFP server that is configured to use only Kerberos authentication, an “Enter your name and password” dialog appears. Chris enters a valid user account name and password, and clicks Connect, but receives the response “You have entered an invalid username or password. Please try again.” What might a local system administrator need to do to resolve this issue?
A. Delete the System keychain on the Mac OS X client computer.
B. Synchronize the clocks on the KDC, the AFP server, and the Mac OS X client computer.
C. Use Directory Access on the Mac OS X client computer to enable the Kerberosv5 plug-in.
D. Run kdestroy on the Mac OS X client computer to destroy any existing tickets in the client computer’s cache.
E. Use Workgroup Manager to create a secure shadow hash of the user’s password on the Mac OS X Server computer.
Answer: B

4. You are deploying a new Mac OS X Server v10.6 computer. How can you configure the new server to augment user accounts from an existing Open Directory master?
A. Select “Import Users and Groups” in Server Assistant, and then create augmented user accounts using Accounts preferences.
B. Select “Create Users and Groups” in Server Assistant, and then configure augmented mappings for the user accounts using Directory Utility.
C. Select “Import Users and Groups” in Server Assistant, and then select “New Augmented User Records” in Workgroup Manager to create augmented user records.
D. Select “Configure Manually” in Server Assistant, import the users from the Open Directory master, and then augment the user accounts from the Advanced User pane in Server Preferences.
Answer: C

5. Which statement presents a difference between a user augment record and a standard user record?
A. Augment records allow the use of a profilePath attribute, while standard user records do not.
B. Augment records allow the use of an smbHome attribute, while standard user records do not.
C. Augment record user names begin with “User:”, while standard user record names contain only the user name.
D. Augment records are members of the apple-user object class, while standard user records are members of the posixAccount object class.
Answer: C

6. dsimport can import user records that are stored in ________.
A. text files, in LDIF format
B. text files, in Mac OS X Server v10.6 XML format
C. delimited text files, in the same format as the /etc/master.passwd file
D. delimited text files, with the record type and attributes specified in the first line
Answer: D

7. In Mac OS X v10.6, which statement about dscl is true?
A. dscl requires root access to edit directory data.
B. dscl makes requests through DirectoryService.
C. dscl shows standard attributes, but does not show native attributes.
D. dscl edits the local directory data store without starting another process.
Answer: B

8. In Mac OS X v10.6, which command-line tool can you use to query a DNS server?
A. dig
B. dscl
C. dsquery
D. lookupd
Answer: A

9. In Mac OS X v10.6, which command-line tool can you use to edit user accounts in the /Local/Default directory domain?
A. dscl
B. vipw
C. addusr
D. ldapmodify
Answer: A

10. Which tool should you use to create a new user in the /BSD/local directory domain on a Mac OS X v10.6 computer?
A. dscl
B. vipw
C. dsaddusr
D. Workgroup Manager
Answer: B

11. You have started up a Mac OS X v10.6 computer in single-user mode. In this mode, which command-line tool can you use to edit a user account in the /Local/Default directory domain?
A. vi
B. vipw
C. plutil
D. slapadd
Answer: A

12. /Local/Default directory domain data is stored in ________.
A. property-list text files
B. tab-delimited text files
C. colon-delimited text files
D. a Berkeley DB database
Answer: A

13. Where in the Mac OS X v10.6 file system are user accounts for the /Local/Default directory domain stored?
A. /var/db/netinfo/local.nidb
B. /etc/openldap/Local/Default/
C. /var/db/dslocal/nodes/Default/users/
D. /Library/Preferences/DirectoryService/Users/
Answer: C

14. Which command can you enter in Terminal to add a user named bob to the staff group?
A. dscl -a bob -g staff
B. slapadd -o group=staff bob
C. dsmemberutil checkmembership -U bob -G staff
D. dseditgroup -o edit -u admin -a bob -t user staff
Answer: D

15. In which situation should you use dseditgroup rather than dscl?
A. You need to edit the Directory ACLs for your groups.
B. You need to edit both the local and network directory domains.
C. You need to edit groups that reside in an Active Directory directory domain.
D. You need a PrimaryGroupID to be created automatically for new group records.
Answer: D

http://www.lead2pass.com/9l0-624.html