Q. You are configuring NFS export settings for a share point that resides on a Mac OS X Server v10.6 computer. What does the “All to Nobody” mapping do?
A. It prohibits export of items and contents to users.
B. It creates the group, “Nobody”, that will be used for NFS access.
C. It tells the NFS server to identify all users by their client settings.
D. It provides all NFS users with the same file privileges as the “nobody” account.
Answer: D
Q. What does the NFS service in Mac OS X Server v10.6 use for authentication when Standard is chosen from the Minimum Security pop-up menu?
A. IP addresses
B. MAC addresses
C. cleartext passwords
D. encrypted passwords
E. Kerberos service tickets
Answer: A
Q. A folder that resides on a Mac OS X Server v10.6 computer is being shared over both AFP and SMB. Why should you NOT enable oplocks on this share point?
A. If you enable oplocks, AFP users will not be able to write data to the share point.
B. If you enable oplocks, AFP users will not be able to connect to or mount the share point.
C. If you enable oplocks, files can be corrupted if they are accessed by AFP and SMB users simultaneously.
D. If you enable oplocks, SMB users will not be able to access files on the share point when an AFP user is connected.
Answer: C
Q. The option to allow an administrator to masquerade as any user is enabled for the AFP service on a Mac OS X Server v10.6 computer. How does the administrator masquerade as the user Fred when connecting to the server?
A. The administrator authenticates using Fred’s user name and the admin user’s password.
B. The administrator authenticates using the admin user name and password, then chooses Fred’s volume
in the AFP volume selection dialog.
C. The administrator opens /System/Library/CoreServices/AFP Connect, enters the admin user name and password, followed by Fred’s user name and password.
D. The administrator authenticates using the admin user name and password, then chooses Fred’s name from the Action pop-up menu in the AFP volume selection dialog.
Answer: A
Q. You have enabled AFP service on your Mac OS X Server v10.6 computer. You have chosen “Any Method” for Authentication in the Access pane. The server will attempt to authenticate file service users using which authentication methods, and in what order?
A. 1) Kerberos
2) SSH
B. 1) Standard
2) Kerberos
C. 1) Kerberos
2) Standard
D. 1) SSH
2) Standard
3) Kerberos
E. 1) Standard
2) Kerberos
3) SSH
Answer: C
Q. You are using Workgroup Manager to configure a user account in Mac OS X Server v10.6. You want the user to authenticate via Kerberos. Which password type should you select for the user account?
A. crypt
B. shadow
C. Open Directory
D. Kerberos Distribution
Answer: C
Q. Which utility can you use to display the status of Kerberos TGTs on a Mac OS X v10.6 computer?
A. Ticket Viewer
B. Server Admin
C. KerberosAgent
D. Kerberos Utility
E. Directory Utility
Answer: A
Q. Which password policy can NOT be set for user accounts in Mac OS X Server v10.6?
A. Password must contain at least one letter.
B. Password must be reset at a specified time interval.
C. Password must differ from the last three passwords used.
D. Password must contain both uppercase and lowercase letters.
E. Password must differ from all passwords used in the past year.
F. Password must contain a character that is not a letter or a number.
Answer: E
Q. Why might a Mac OS X computer be unable to use Kerberos to access a Mac OS X Server v10.6 computer that has Kerberos enabled for file service authorization?
A. The client and server computer’s time settings are out of sync.
B. The client computer is not configured to use a static IP address.
C. The client computer is not configured to use the server as a DNS server.
D. The IP address of the client computer does not have a PTR record in the DNS server.
Answer: A
Q. What token does a client present when authenticating to a kerberized service?
A. the user’s password
B. a client-generated service ticket
C. a service ticket obtained from the Key Distribution Center (KDC)
D. a ticket-granting ticket (TGT) obtained from the Key Distribution Center (KDC)
Answer: C
