IBM 000-928
000-928 IBM Tivoli Directory Server V6.1
Implementation
Practice Test
Version 3.0
QUESTION NO: 1
What makes up the LDAP schema?
A. only a person's name and phone numbers
B. definitions ofobjectclasses and attributes
C. a person's name and applications to be accessed
D. a list of other IBM Tivoli Directory Server V6.1 servers in the customer environment
Answer: B
QUESTION NO: 2
Which type of class is the top-most (top) object class in the LDAP schema?
A. abstract class
B. auxiliary class
C. linkedContainer class
D. extensibleObject class
Answer: A
QUESTION NO: 3
Which functions in a deployment are implemented by IBM Tivoli Directory Server V6.1?
A. web server setup for web applications
B. firewall setup for the network topology
C. LDAP proxy server setup for the LDAP environment
D. UNIX client application setup for the LDAP environment
Answer: C
QUESTION NO: 4
Which technology provides SSL security for the directory server?
A. a CRAM-MD5 technology
B. a message privacy technology
C. a public-key cryptographic technology
D. a technology to exchange names and dates
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 2
ITRealExams.com
Answer: C
QUESTION NO: 5
What change should be made first to the IBM Tivoli Directory Server V6.1 Web Administration
Tool's URL, if it is deployed in a full WebSphere Application Server (WAS)?
A. change the protocol from HTTP to HTTPS
B. change the hostname in the URL tolocalhost
C. change the port number in the URL to the WAS port number
D. change the context root for the URL to the WAS default context root
Answer: C
QUESTION NO: 6
Which installation option is available for the IBM Tivoli Directory Server V6.1 Directory White
Pages?
A. a single ITDS V6.1 proxy server
B. EmbeddedWebSphere Application Server
C. an ITDS V6.1 instance replicating with another ITDS V6.1 instance
D. an ITDS V6.1 instance acting as a gateway in a corporate-wide replication configuration
Answer: B
QUESTION NO: 7
If IBM Tivoli Directory Server V6.1 is installed with an existing Active Directory installation, which
two ports will already be in use? (Choose two.)
A. 80
B. 389
C. 636
D. 9080
E. 12104
Answer: B,C
QUESTION NO: 8
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 3
ITRealExams.com
Which two IBM Tivoli Directory Server V6.1 components are absolutely necessary for a system to
be installed and configured as peer master server in a replicated topology? (Choose two.)
A. DB2
B. GSKit
C. ITDS V6.1 server
D. ITDS V6.1 proxy server
E. Web Administration Tool
Answer: A,C
QUESTION NO: 9
What is a prerequisite for IBM Tivoli Directory Server V6.1 Directory White Pages?
A. DB2 runtime client
B. LDAP C client SDK
C. Tivoli Directory Integrator
D. EmbeddedWebSphere Application Server
Answer: D
QUESTION NO: 10
What is the purpose of the db2ls command?
A. to provide the DB2 V9.1 version and install location information
B. to provide recursive listing of all files from a DB2 V9.1 instance
C. to provide recursive listing of all files from a DB2 V9.1 installation
D. to provide all available DB2 V8 and V9 instance names from the system
Answer: A
QUESTION NO: 11
Which operating system is an IBM Tivoli Directory Server V6.1 client only supported platform?
A. IBM AIX 5.2
B. HP-UX 11i V2
C. Sun Solaris 10
D. Microsoft Windows XP Professional
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 4
ITRealExams.com
Answer: D
QUESTION NO: 12
Which two statements are true about the idsucfgchglg command? (Choose two.)
A. Itunconfigures replication.
B. Itunconfigures the changelog.
C. It removes thechangelog database.
D. Itunconfigures the database backend.
E. It can be run when the server is running.
Answer: B,C
QUESTION NO: 13
Which statement is true about autonomic cache configuration attributes?
A. They cannot be manipulated.
B. They are dynamically configurable.
C. They are not stored in theibmslapd.conf file.
D. They can be set only through the Web Administration Tool.
Answer: B
QUESTION NO: 14
Which condition must be met before a database can be configured with an IBM Tivoli Directory
Server V6.1 instance?
A. The user must have no unread mail.
B. The user must have an email account.
C. The user can be deleted from the system.
D. The user name can be used to log in to the machine.
Answer: D
QUESTION NO: 15
Which two utilities are required for managing logs in IBM Tivoli Directory Server V6.1? (Choose
two.)
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 5
ITRealExams.com
A. idslgmt
B. idsicrt
C. idslogmgmt
D. idslogmanagement
E. Web Administration Tool
Answer: C,E
QUESTION NO: 16
Which utility can be used to configure an IBM Tivoli Directory Server V6.1 instance as a proxy?
A. idsimgr
B. idsxinst
C. idsproxy
D. idsldapxcfg
Answer: B
QUESTION NO: 17
Regarding the instance owner, which three tasks need to be performed on UNIX operating
systems prior to creating the instance? (Choose three.)
A. create the user
B. add user to the root group
C. add the user to the system group
D. add the user to theidsldap group
E. verify the user has remote shell enabled
F. set the users password and verify the password is ready for use
Answer: A,D,F
QUESTION NO: 18
Which statement is true about configuring an attribute cache if the autonomic attribute cache is not
used?
A. The filter cache works as the attribute cache.
B. The attribute cache can be configured manually.
C. Attribute caching must be set in the DB2 database.
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 6
ITRealExams.com
D. It is not possible to configure an attribute cache if the autonomic attribute cache is not used.
Answer: B
QUESTION NO: 19
What is the default time interval for the IBM Tivoli Directory Server V6.1 log management tool to
check log file sizes?
A. 5 minutes
B. 15 minutes
C. 30 minutes
D. 60 minutes
Answer: B
QUESTION NO: 20
What must be done prior to importing encrypted data via an LDIF file, extracted from an existing
IBM Tivoli Directory Server V6.1 instance, into a new instance?
A. configure the database for online backup
B. distribute the original LDIF into multiple smaller LDIF files
C. manually edit the LDIF file to remove allcn=localhost entries
D. cryptographically synchronize the new instance with the original ITDS V6.1 instance
Answer: D
QUESTION NO: 21
Which three steps must be taken (at a minimum) to implement an instance running in normal
mode when an instance does not currently exist? (Choose three.)
A. create instance
B. configure suffix
C. configurechangelog
D. configure a DB2 database
E. configure database buffer pools
F. configure administrator DN and password
Answer: A,D,F
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 7
ITRealExams.com
QUESTION NO: 22
Which statement is true about the replication administrator and directory data administrator roles?
A. They have equivalent rights.
B. They have nothing in common.
C. The administrative rights of the directory data administrator are a subset of the replication
administrator.
D. The administrative rights of the directory data administrator are a superset of the replication
administrator.
Answer: D
QUESTION NO: 23
What is an invalid administration DN?
A. cn=root
B. cn=admin
C. o=ibm,c=us
D. cn=admin,configuration
Answer: D
QUESTION NO: 24
What is the name of the changelog database?
A. ldapclog
B. changelog
C. ldapchange
D. user-defined
Answer: A
QUESTION NO: 25
Which corresponding data structure is created in DB2 during an IBM Tivoli Directory Server V6.1
instance creation?
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 8
ITRealExams.com
A. table
B. instance
C. database
D. tablespace
Answer: B
QUESTION NO: 26
Which file contains newly added attribute definitions by default?
A. V3.ibm.at
B. V3.ibm.oc
C. V3.schema
D. V3.modifiedschema
Answer: D
QUESTION NO: 27
What are two features of the IBM Tivoli Directory Server V6.1 proxy server? (Choose two.)
A. failover
B. failback
C. transactions
D. filter-based distribution
E. priority-based load balancing
Answer: A,B
QUESTION NO: 28
You have multiple IP addresses on a system where a new IBM Tivoli Directory Server V6.1
instance will be configured. By default, which IP addresses does the IBM Tivoli Directory Server
V6.1 instance bind to?
A. all IP addresses on the OS
B. the alias IP address of the OS
C. the primary IP address of the OS
D. the IP address assigned to the system hostname
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 9
ITRealExams.com
Answer: A
QUESTION NO: 29
Which two types of replicas can be created using the idsideploy tool? (Choose two.)
A. peers
B. routers
C. replicas
D. gateways
E. forwarders
Answer: A,C
QUESTION NO: 30
Which two suffixes are present by default in an IBM Tivoli Directory Server V6.1 instance?
(Choose two.)
A. o=ibm,c=us
B. cn=localhost
C. cn=pwdpolicy
D. cn=changelog
E. cn=ibmpolicies
Answer: B,E
QUESTION NO: 31
Which two fields are logged in a typical audit log entry? (Choose two.)
A. server ID
B. time stamp
C. connection ID
D. server IP address
E. emergency thread status
Answer: B,C
QUESTION NO: 32
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 10
ITRealExams.com
Which two methods can be used for pass-through authentication when attribute mapping is not
specified? (Choose two.)
A. Pass-through authentication is notbe supported in this situation.
B. The actual ITDS V6.1 server searches for a mapping entry on the pass-through LDAP server.
C. The actual IBM Tivoli Directory Server V6.1 server creates its own attribute mapping logic.
D. The entry on the actual ITDS V6.1 server maps directly to a similar entry in the pass-through
LDAP server.
E. The entry on the actual ITDS V6.1 server explicitly maps to some entry on the pass-through
LDAP server.
Answer: D,E
QUESTION NO: 33
Which two methods are used to create a custom LDAP schema? (Choose two.)
A. update the V3.modifiedschema file
B. update the V3.userdefinedschema file
C. add a custom schema text file using theidscfgsch command
D. define a cn=modifiedschema suffix and load it with custom schema
E. define a cn=schema suffix and load it with custom schema using idsaddsch
Answer: A,C
QUESTION NO: 34
Which IBM Tivoli Directory Server component from previous versions can co-exist with IBM Tivoli
Directory Server V6.1?
A. ITDS client
B. ITDS server
C. proxy server
D. Web Administration Tool
Answer: A
QUESTION NO: 35
Which task must be manually performed during a typical IBM Tivoli Directory Server V6.1
upgrade?
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 11
ITRealExams.com
A. schema migration
B. database migration
C. backup custom suffix list
D. backup custom schema files
Answer: D
QUESTION NO: 36
What is the impact of migrating one IBM Tivoli Directory Server in a peer replication topology?
A. There is no impact.
B. Differences in schema may cause replication failures.
C. The migrated peer master server becomes a read only replica.
D. The migrated ITDS server fails to start because of incorrect server ID.
Answer: B
QUESTION NO: 37
Which document describes the migration procedures for IBM Tivoli Directory Server V6.1 from
previous releases?
A. Quick Start Guide
B. System Requirements document
C. Installation and Configuration Guide
D. What's New for This Releasedocument
Answer: C
QUESTION NO: 38
What is the purpose of the command migbkup?
A. to back up the database
B. to back up the data in the form of LDIF file
C. to back up the configuration and schema files
D. to migrate to IBM Tivoli Directory Server V6.1 across systems
Answer: C
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 12
ITRealExams.com
QUESTION NO: 39
Which two components must be migrated for an IBM Tivoli Directory Server V6.1 proxy server
migration? (Choose two.)
A. configuration
B. DB2 database
C. custom schema
D. server certificate
E. replication agreements
Answer: A,C
QUESTION NO: 40
Which two tasks are accomplished during Web Administration Tool migration? (Choose two.)
A. The Web Administration Tool graphical user interface is preserved.
B. The previous version of Web Administration Tool's configuration is preserved.
C. The previous version of EmbeddedWebSphere Application Server configuration is preserved.
D. The latest Web Administration Tool is deployed into the existing EmbeddedWebSphere
Application Server.
E. The existing Web Administration Tool is deployed into the new EmbeddedWebSphere
Application Server.
Answer: B,C
QUESTION NO: 41
Which command line utility is used to generate key stores so that SSL/TLS encryption can be
utilized in the IBM Tivoli Directory Server V6.1 environment?
A. gsk7ikm
B. idscfgKey
C. idscfgSSL
D. gsk7capicmd
Answer: D
QUESTION NO: 42
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 13
ITRealExams.com
When is multi-threaded replication considered?
A. when data consistency is critical
B. when scheduled replication is enabled
C. when the environment has a high update rate
D. when servers are taken offline for a daily backup
Answer: C
QUESTION NO: 43
After optimizing all heap sizes and buffer pools, the system administrator notices that the disk I/O
is extremely high. What is the likely cause?
A. network congestion
B. CPU utilization at 100%
C. system depleted of virtual memory
D. system depleted of physical memory
Answer: D
QUESTION NO: 44
What are two required locations for storing a proxy authorization group? (Choose two.)
A. cn=localhost
B. cn=pwdPolicy
C. cn=ibmpolicies
D. cn=proxy,cn=configuration
E. ou=proxy group, o=company
Answer: A,C
QUESTION NO: 45
What is the most important DB2 maintenance task that must be performed on a regular basis to
keep the IBM Tivoli Directory Server V6.1 server performing optimally?
A. db2reorgchk against all tables
B. db2reorg the indexes for the attribute tables
C. db2runstats using the idsrunstats utility or via the idsxcfg tool
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 14
ITRealExams.com
D. drop and recreate the backend database so the rows in DB2 are contiguous
Answer: C
QUESTION NO: 46
Which file does the data partitioning utility use to split the data from a given LDIF file?
A. the ibmslapd.log from the proxy server
B. theibmslapd.conf from the proxy server
C. the ibmslapd.log from the backend server
D. theibmslapd.conf from the backend server
Answer: B
QUESTION NO: 47
An LDAP administrator creates three new password policies in a suffix on his IBM Tivoli Directory
Server V6.1 server and applies them to three different groups. Even though the password policies
were successfully applied to the groups, the password policies are not being applied to any of the
users. What is the likely explanation for this?
A. Password policy cannot be applied to group objects.
B. You can only have one password policy enabled per suffix.
C. Theibm-pwdPolicy attribute for the global password policy settings has been set to FALSE.
D. The ITDS V6.1 server was never restarted. Password policy changes require a server restart.
Answer: C
QUESTION NO: 48
Which supported SSL key store type is used with the IBM Tivoli Directory Server V6.1 Web
Administration Tool?
A. CMS
B. KDB
C. JKS
D. JCEKS
Answer: C
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 15
ITRealExams.com
QUESTION NO: 49
For schema changes to replicate, which subtree needs to be configured for replication?
A. cn=schema
B. o=ibm,c=us
C. cn=replication
D. cn=ibmpolicies
Answer: D
QUESTION NO: 50
Which two schema files are necessary for a successful server startup? (Choose two.)
A. V3.user.at
B. V3.idsrules
C. V3.attributes
D. V3.ldapsyntaxes
E. V3.objectclasses
Answer: A,D
QUESTION NO: 51
Which kind of authentication is enabled between the IBM Tivoli Directory Server V6.1 client and
server by the serverAuth authentication method?
A. one-way authentication
B. two-way authentication
C. biometric authentication
D. challenge-response authentication
Answer: A
QUESTION NO: 52
Which statement is true about password policy support in IBM Tivoli Directory Server V6.1?
A. Password policy can only be set at the suffix level.
B. Password policy can be set at a group or user level.
C. Password policy is determined by a user's group membership.
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 16
ITRealExams.com
D. Password policy is set once globally and equally applies to all users in all suffixes on the server.
Answer: B
QUESTION NO: 53
When configuring the Web Administration Tool console for SSL, which two fields must point to the
key store? (Choose two.)
A. Trust database path and file name
B. JKS key database path and file name
C. CMS key database path and file name
D. KDB key database path and file name
E. PKCS11 key database path and file name
Answer: A,B
QUESTION NO: 54
Which two elements must be used when defining a custom objectclass in the schema? (Choose
two.)
A. attributes
B. ldapsyntaxes
C. objectclasses
D. matchingrules
E. IBMattributeTypes
Answer: A,C
QUESTION NO: 55
Which command can be used to create an access control list for the directory information tree in
IBM Tivoli Directory Server V6.1?
A. idsxcfg
B. idsaddacl
C. idsimportacl
D. idsldapmodify
Answer: D
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 17
ITRealExams.com
QUESTION NO: 56
Which type of objectclass defines a server as a gateway server?
A. ibm-peerGateway
B. ibm-serverGateway
C. ibm-masterGateway
D. ibm-replicaGateway
Answer: D
QUESTION NO: 57
When administering an IBM Tivoli Directory Server V6.1 instance remotely via the ibmdirctl
administrative command, which parameter should be used for finding the current status of log
management services?
A. status
B. condition
C. statusreturn
D. statuslogmgmt
Answer: D
QUESTION NO: 58
Where are the configuration settings kept for the log management utility?
A. in the system registry
B. in the idslogmgmt.cfg file
C. in thecn=ibmpolicies subtree
D. in theibmslapd.conf file for the instance
Answer: D
QUESTION NO: 59
After performing an extract of Server A and a subsequent import of the LDIF into Server B, how
can you verify whether the trees are synchronized?
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 18
ITRealExams.com
A. use theidsldapdiff utility to compare the trees for differences
B. extract Server B to an LDIF and compare to the original Server A LDIF
C. redirect an idsldapsearch of Server A to an idsldapmodify of Server B
D. extract Server B to an LDIF and use it as an input for an idsldapmodify to Server A
Answer: A
QUESTION NO: 60
Which three steps must be taken if a certificate is compromised? (Choose three.)
A. restart the administration services
B. delete the certificate from the system
C. remove the root certificate for the host
D. add the certificate to the CRL list in the key store
E. modify thecn=CRL,cn=SSL,cn=Configuration object
F. restart the IBM Tivoli Directory Server V6.1 server services
Answer: A,E,F
QUESTION NO: 61
What should be done when using the db2 reorg command?
A. restartibmslapd before running db2 reorg
B. switch user to root before running db2reorg
C. performidsrunstats after running db2 reorg
D. performidsrunstats before running db2 reorg
Answer: C
QUESTION NO: 62
Which tool can be utilized to optimize DB2 buffer pools for IBM Tivoli Directory Server V6.1?
A. db2buff
B. idsdbbuff
C. idsperftune
D. db2setbufferpools
Answer: C
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 19
ITRealExams.com
QUESTION NO: 63
A new attribute type has been added to all of the back end IBM Tivoli Directory Server V6.1
servers. A search sent through the ITDS V6.1 proxy does not return the new attribute type, but the
same search sent directly to the back end ITDS V6.1 servers does. What is the cause?
A. The ITDS V6.1 proxy schema has not been updated.
B. The new attribute type is actually a schema violation.
C. The back end ITDS V6.1 servers did not return the new attribute type.
D. The new attribute type is binary, and the ITDS V6.1 proxy does not support binary attribute
types.
Answer: A
QUESTION NO: 64
What does the idsldapdiff command do?
A. synchronizes any entries that do not match
B. lists entries in the master server most recently added to the replica server
C. highlights entries in the replica server when entry date and time do not match
D. displays entries in the replica server that are larger than corresponding entries in the master
server
Answer: A
QUESTION NO: 65
You have master-replica replication, and you notice that the replica server is not running. Which
command tries to push replication again after restarting the replica server?
A. idsldapexop -op quiesce -rc
B. idsldapexop -op controlreplerr -action resume -c
C. idsldapexop -op controlrepl -action resume -rc
D. idsldapexop -op controlreplerr -retry all -a < ReplicationAgreement>
Answer: D
QUESTION NO: 66
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 20
ITRealExams.com
Which three parameters are required to execute idsldapexop over a TLS connection? (Choose
three.)
A. K
B. P
C. Q
D. S
E. T
F. Z
Answer: A,B,F
QUESTION NO: 67
A user belongs to two search limit groups. Group1 has a limit of 100 entries and 10 seconds.
Group2 has a limit of 50 entries and 50 seconds. What are the user's search limitations?
A. 50 entries and 50 seconds
B. 50 entries and 10 seconds
C. 100 entries and 50 seconds
D. 100 entries and 10 seconds
Answer: C
QUESTION NO: 68
Which two tasks should be performed at regular intervals based on the updates coming into the
IBM Tivoli Directory Server V6.1 server? (Choose two.)
A. run db2reorgchk
B. perform database migration
C. run theidsrunstats command
D. upgrade to the latest level of ITDS and DB2fixpacks
E. monitor the ibmslapd.log file for errors related to performance
Answer: A,C
QUESTION NO: 69
You find that the number of objects in the directory has increased substantially. You run
idsrunstats, but the utility takes an excessive amount of time to complete. Which database
configuration parameter can be changed to increase the performance of idsrunstats?
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 21
ITRealExams.com
A. LOGFILSIZ.
B. LOCKTIMEOUT
C. STAT_HEAP_SZ
D. LDAP_MAXCARD
Answer: C
QUESTION NO: 70
Which suffix contains entries for directory changes if configured correctly?
A. cn=changelog
B. cn=logs, cn=changes
C. cn=changelog, cn=monitor
D. cn=changes, cn=ibmpolicies
Answer: A
QUESTION NO: 71
A customer installs an IBM Tivoli Directory Server V6.1 proxy server, and they want to ensure that
writes to the directory are available for immediate reads. What should be configured on the proxy
to support this function?
A. High consistency must be enabled.
B. Global transactions across all ITDS V6.1 servers must be enabled.
C. Read operations should always be routed to a single ITDS V6.1 server.
D. The priority for one back end ITDS V6.1 server should be higher than the other back end ITDS
V6.1 servers.
Answer: A
QUESTION NO: 72
Which feature can be configured using the idsxcfg utility?
A. replication
B. password policy
C. access control list
D. database optimization
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 22
ITRealExams.com
Answer: D
QUESTION NO: 73
IBM Tivoli Directory Server V6.1 audit logs show only failed logins. What should be done so that
successful logins are also tracked?
A. increase audit logging to log level 3
B. increase audit logging to log level 4
C. neverturn on audit logging to record successful operations
D. turn on auditing for successful operations as well as failed operations
Answer: D
QUESTION NO: 74
What is the best way to identify a memory leak problem with IBM Tivoli Directory Server V6.1?
A. monitor processor usage
B. monitor the SSL connections
C. monitor process memory usage
D. review the operating system logs
Answer: C
QUESTION NO: 75
The ibmslapd server has started up in configuration-only mode, and you believe it is because the
DB2 user's password has been changed.
Which log file would you check to find the specific error returned by DB2 to the server?
A. audit.log
B. db2cli.log
C. db2diag.log
D. ibmslapd.log
Answer: B
QUESTION NO: 76
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 23
ITRealExams.com
You are configuring replication between a supplier and a consumer in the Web Administration Tool
and it fails. Which two logs will help you resolve this error? (Choose two.)
A. audit.log from the supplier
B. ibmslapd.log from the supplier
C. ibmdiradm.log from the supplier
D. ibmdiradm.log from the consumer
E. ibmslapd.log from the targeted consumer
Answer: B,E
QUESTION NO: 77
The IBM Tivoli Directory Server V6.1 server is starting in configuration-only mode, and after
consulting the relevant logs, you find the following error message appears to be the cause of the
failure:
SQL30082N Attempt to establish connection failed with security reason "1" ("PASSWORD
EXPIRED"). SQLSTATE=08001
How do you resolve this issue?
A. determne if the root administrative account in LDAP has expired
B. change the password of the DB2 user in the operating system that LDAP uses to connect to
DB2
C. enable audit logging to determine what operation is sending in the request causing this error
D. add a new user to the administrative group in LDAP to change the password of the original
admin user
Answer: B
QUESTION NO: 78
Which log file records failed connection attempts?
A. operating system log file
B. IBM Tivoli Directory Server V6.1 SSL log file
C. IBM Tivoli Directory Server V6.1 client log file
D. IBM Tivoli Directory Server V6.1 server log file
Answer: D
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 24
ITRealExams.com
QUESTION NO: 79
Which statement is true about the namespace specified by the LDAP Naming Model?
A. Each name must end with "o=world".
B. Attributes are used to construct the names of objects.
C. Each component of a name must begin with a lower case alphabetic character.
D. The depth of the tree structure is unlimited but must have at least three levels.
Answer: B
QUESTION NO: 80
What does the default IBM Tivoli Directory Server V6.1 deployment contain?
A. one ITDS V6.1 server instance and a remote DB2 database
B. one ITDS V6.1 server instance and one DB2 database on one single machine
C. several ITDS V6.1 server instances distributed across many geographical areas
D. one ITDS V6.1 server instance and multiple DB2 databases on a second UNIX machine
Answer: B
QUESTION NO: 81
Which method is used for authentication in IBM Tivoli Directory Server V6.1?
A. use of an LDAP PIN number
B. basic and simple authentication
C. a process and procedure from the Business Operations department
D. anonymous authentication and valid user name from Active Directory
Answer: B
QUESTION NO: 82
Which edition of DB2 is absolutely required for IBM Tivoli Directory Server V6.1 full server
instance?
A. DB2 UDBEnterprise Server
B. DB2 UDB Workgroup Server
C. DB2 UDB Personal on Windows and Linux
D. DB2 UDB Run-Time, Administration, and Application Development Clients
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 25
ITRealExams.com
Answer: C
QUESTION NO: 83
Which DB2 version is included with the IBM Tivoli Directory Server V6.1?
A. DB2 V9.1 Fix Pack 7
B. DB2 V8.1 Fix Pack 2
C. DB2 V8.2 Fix Pack 1
D. DB2 V9.1 Fix Pack 2
Answer: D
QUESTION NO: 84
Which three functions does the Tivoli Directory White Pages application provide for users?
(Choose three.)
A. add a user
B. search for users
C. change password
D. search the schema
E. manage console server
F. administer instance configuration
Answer: A,B,C
QUESTION NO: 85
Which component must be installed if installing the IBM Tivoli Directory Server V6.1 proxy server?
A. LDAP C client SDK
B. LDAP Java client SDK
C. Web Administration Tool
D. no component need be installed
Answer: A
QUESTION NO: 86
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 26
ITRealExams.com
What is the context root for the IBM Tivoli Directory Server V6.1 Web Administration Tool?
A. /
B. /TDS
C. /IDSjsp
D. /IDSWebApp
Answer: D
QUESTION NO: 87
A customer wants to install an IBM Tivoli Directory Server V6.1 instance on a platform with an
existing ITDS V5.2 instance. What should the customer do?
A. migrate the ITDS V5.2 server to an ITDS V6.1 server
B. install the ITDS V6.1 server to coexist with an ITDS V5.2 server
C. install the ITDS V6.1 server and use a proxy to link the ITDS V5.2 server
D. create an IBM Tivoli Directory Server V6.1 instance using the DB2 backend from the ITDS V5.2
server
Answer: A
QUESTION NO: 88
Which component of IBM Tivoli Directory Server V6.1 is provided as a separate installation
image?
A. LDAP client SDK
B. LDAP proxy server
C. Directory White Pages
D. Web Administration Tool
Answer: C
QUESTION NO: 89
Which two statements are true about the idsucfgdb utility? (Choose two.)
A. It canunconfigure suffixes.
B. It does not need instance name as an input.
C. It automaticallyunconfigures the changelog.
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 27
ITRealExams.com
D. It can remove the configured database if needed.
E. It is used tounconfigure a database associated with a directory server instance.
Answer: D,E
QUESTION NO: 90
Which two statements are true about password migration in pass-through authentication?
(Choose two.)
A. It is enabled by default.
B. It is disabled by default.
C. The password migration is done only if the bind on the pass-through LDAP server is successful.
D. The encryption scheme of the pass-through LDAP server is used even on the actual IBM Tivoli
Directory Server V6.1 server.
E. Maintaining the consistency of passwords across the actual ITDS V6.1 server and
thepassthrough LDAP server is the responsibility of IBM Tivoli Directory Server V6.1.
Answer: B,C
QUESTION NO: 91
What are the minimum and maximum limits for the encryption seed value?
A. minimum 10, maximum 100
B. minimum 10, maximum 999
C. minimum 12, maximum 1016
D. minimum 10, maximum 1012
Answer: C
QUESTION NO: 92
Which two are valid suffixes? (Choose two.)
A. cn=root
B. cn,o=ibm
C. dn: admin
D. dn: ibm,us
E. o=ibm,c=us
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 28
ITRealExams.com
Answer: A,E
QUESTION NO: 93
Which statement is true about configuring an attribute cache if the autonomic attribute cache is not
used?
A. The filter cache works as the attribute cache.
B. The attribute cache can be configured manually.
C. Attribute caching must be set in the DB2 database.
D. It is not possible to configure an attribute cache if the autonomic attribute cache is not used.
Answer: B
QUESTION NO: 94
You create an entry of objectclass person, with a DN cn=manager,cn=ibmpolicies. You add this
entry into the global administrative group on all backend servers. You are now logged on to the
proxy using the Web Administration Tool as cn=manager,cn=ibmpolicies. Which task can you
perform?
A. start and stop the proxy server
B. configure the health check timer
C. view the combined data from all back end servers
D. determine the status of all of the back end servers
Answer: C
QUESTION NO: 95
Which two utilities can be used to configure an IBM Tivoli Directory Server V6.1 instance as a
proxy? (Choose two.)
A. idsicrt
B. idsimgr
C. ldapxcfg
D. idsxinst
E. idsproxy
Answer: A,D
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 29
ITRealExams.com
QUESTION NO: 96
What is the most important consideration when configuring DB2 for online backup?
A. amount of disk space
B. number of DB2tablespaces
C. number of DB2 connections
D. amount of physical memory
Answer: A
QUESTION NO: 97
What is a way to invalidate an administrative user without deleting the user entry?
A. delete the ibm-slapdAdminRole from the user entry
B. redefine the user entry with the nvalid objectclass
C. in the user entry, setibm-slapdAdminRole to NOADMIN
D. add an attribute ibm-slapdInvalidAdmin to the user entry and set it to TRUE
Answer: C
QUESTION NO: 98
Which attribute is used to enable or disable the audit log?
A. ibm-audit
B. enable-audit
C. ibm-auditlog
D. disable-audit
Answer: A
QUESTION NO: 99
Which tool is used to split data in a distributed directory setup?
A. ddsplit
B. ddsetup
C. idsldapdiff
D. idsproxysetup
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 30
ITRealExams.com
Answer: B
QUESTION NO: 100
When must the synchronization occur in order to cryptographically synchronize two IBM Tivoli
Directory Server V6.1 instances, where server A is already configured and server B is the new
instance?
A. before configuring the instance on server B
B. after starting the new instance on server B for the first time
C. before starting the new instance on server B for the first time
D. before adding the directorysuffix(es) to the instance on server B
Answer: C
QUESTION NO: 101
Which three utilities can be used to modify the IBM Tivoli Directory Server V6.1 schema? (Choose
three.)
A. idsxinst
B. idscfgsch
C. idsldapadd
D. idsldapdelete
E. idsldapmodify
F. Web Administration Tool
Answer: B,E,F
QUESTION NO: 102
Which two tools can be used to configure the changelog with an IBM Tivoli Directory Server V6.1
instance? (Choose two.)
A. idsxcfg
B. idscfgchglg
C. idscfgchangedb
D. idscfgchangelog
E. Web Administration Tool
Answer: A,B
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 31
ITRealExams.com
QUESTION NO: 103
What rules apply to the IBM Directory Server V6.1 database instance name and the database
name?
A. Instance name and database name can differ.
B. Instance name and database name must be the same.
C. Database name must be the same as the database owner name.
D. Instance name must be the same as the database owner's password.
Answer: A
QUESTION NO: 104
Which two utilities can be used to configure the administrator DN and password? (Choose two.)
A. idsicrt
B. idsxcfg
C. idsdnpw
D. idscfgdb
E. idscfgpw
Answer: B,C
QUESTION NO: 105
When is the attribute cache refreshed if autonomic attribute cache is used? (Choose two.)
A. every day
B. every 15 minutes
C. every 60 minutes
D. depends on the cache settings
E. every time the server is restarted
Answer: D,E
QUESTION NO: 106
Why is it necessary to have online backup enabled on the source instance when idsideploy is
being used?
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 32
ITRealExams.com
A. It improves performance.
B. It requires circular logging.
C. It allows the database copy to be created when the server is up and running.
D. It allows the database copy to be created with more security than offline backup.
Answer: C
QUESTION NO: 107
Which condition must be met during the user creation stage when creating the instance owner?
A. The user must be namedidsinst.
B. The user must be named ldapdb2.
C. The user must have a complex password ready for use.
D. The user root must be a member of the user's primary group.
Answer: D
QUESTION NO: 108
On a UNIX system, which directory is created after an instance called instance1 is successfully
created?
A. /var/instance1
B. /home/instance1
C./instance1
D./idsslapd-instance1
Answer: D
QUESTION NO: 109
Which software is required for running the IBM Tivoli Directory Server V6.1log management tool?
A. IBM Tivoli Access Manager
B. IBM Tivoli Storage Manager
C. IBM Tivoli Directory Integrator
D. WebSphere Application Server
Answer: C
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 33
ITRealExams.com
QUESTION NO: 110
What is the preferred migration solution in an environment where the IBM Tivoli Directory Server
contains a large number of entries?
A. migrate using the DB2 utilities
B. export and import the data in the form of an LDIF file
C. perform the migration using theidsbulkload command
D. perform the migration using theidsimigr and idsdbmigr commands
Answer: D
QUESTION NO: 111
What happens when you upgrade from IBM Tivoli Directory Server V6.0 to ITDS V6.1?
A. ITDS V6.1 upgrade backs up the existing ITDS V6.0 instance.
B. ITDS V6.1 automaticallymigrates the existing ITDS V6.0 instance.
C. ITDS V6.1 upgrade does nothing with the existing ITDS V6.0 instance.
D. ITDS V6.1 instance gets deployed, based on the existing ITDS V6.0 instance.
Answer: C
QUESTION NO: 112
What can be done to correct the format of a backup schema file during a migration of IBM Tivoli
Directory Server?
A. verify the V3.modifiedschema file has no read-only bit set
B. verify the V3.modifiedschema file contains no multiple blank lines between stanzas
C. verify the V3.modifiedschema file contains no new line character in the middle of a definition
D. verify the V3.modifiedschema file for previous and new server instances has the same date and
time
Answer: A
QUESTION NO: 113
Which statement is true about a migration to IBM Tivoli Directory Server V6.1?
A. Instance deployment can be used to perform migration.
B. IBM Tivoli Directory Server V6.1 allows online migration.
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 34
ITRealExams.com
C. The existing ITDS servers must be stopped before starting the migration.
D. IBM Tivoli Directory Server V6.1 uses the replication feature for migration.
Answer: C
QUESTION NO: 114
Which type of data store is used to save custom LDAP schema related to IBM Tivoli Directory
Server V6.1?
A. text files
B. XML files
C. CSV files
D. HTML files
Answer: A
QUESTION NO: 115
What must you do to perform a database migration from an existing IBM Tivoli Directory Server
V5.1 environment on AIX V5.2, with DB2 V8.x Workgroup Server Edition to an ITDS V6.1 server
with DB2 V9.x?
A. uninstall ITDS V5.1 completely
B. upgrade DB2 and migrate the DB2 instance
C. perform an ITDS instance migration directly
D. perform replication setup between the ITDS V5.1 and ITDS V6.1 for data migration
Answer: B
QUESTION NO: 116
What is the correct procedure for migrating an IBM Tivoli Directory Server V5.2 environment that is
on AIX V5.1 (unsupported for ITDS V6.1) to ITDS V6.1 on AIX V5.3 (supported for ITDS V6.1)?
A. run the idsimigr command
B. perform a manual migration of configuration, schema, and data
C. run the idsideploy command to clone ITDS V5.2 on an ITDS V6.1 system
D. upgrade the OS on ITDS V5.2 system to an OS level supported by ITDS V6.1
Answer: B
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 35
ITRealExams.com
QUESTION NO: 117
Which two tasks are accomplished during the Web Administration Tool migration? (Choose two.)
A. The list of console servers is preserved.
B. The SSL properties of Web Administration Tool are preserved.
C. The SSL properties of Web Administration Tool are reset to default settings.
D. The Web Administration Tool console administrator and password settings are reset to default.
E. The IBM Tivoli Directory Server V6.1 server default instance information is added into list of
console servers.
Answer: A,B
QUESTION NO: 118
Which command line utility is used to modify the configuration to add a schema file?
A. idsaddsch
B. idscfgsch
C. idsaddschema
D. idscfgschema
Answer: B
QUESTION NO: 119
Which two password policy enhancements are provided for IBM Tivoli Directory Server V6.1?
(Choose two.)
A. ACL-based policy
B. schema-based policyCGSKit used to enforce policy
C. user and group-based policies
D. policy enforced for DIGEST-MD5 binds
Answer: C,D
QUESTION NO: 120
Web Administration Tool is configured for SSL with a secure connection type of SSL. What
happens if you attempt to log in to a running IBM Tivoli Directory Server V6.1 server on a non-SSL
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 36
ITRealExams.com
port?
A. The login fails.
B. The login is successful.
C. The connection is refused.
D. The login displays a warning message.
Answer: B
QUESTION NO: 121
Given the following replication filter:
dn: cn=replicationfilter, cn=localhost
objectclass: ibm-replicationFilter
ibm-replicationFilterAttr: (objectclass=person):(cn,sn,userPassword)
ibm-replicationFilterAttr: (objectclass=inetOrgPerson):!(userPassword,employeeNumber)
ibm-replicationFilterAttr: (objectclass=*): !(*)
Which two statements are true? (Choose two.)
A. No entries will be replicated.
B. For any entry that is not of typeroup or emberOf no attributes will be replicated.
C. For any entry that is not of typeerson or netOrgPerson, no attributes will be replicated.
D. Entries that contain botherson and netOrgPerson objectclasses will replicate the attribute
userPassword.
E. Entries that contain botherson and netOrgPerson objectclasses will replicate the attributes cn
and sn only.
Answer: C,E
QUESTION NO: 122
What is the maximum allowable length of an attribute that needs to be indexed?
A. 240 bytes
B. 320 bytes
C. 512 bytes
D. 1024 bytes
Answer: A
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 37
ITRealExams.com
QUESTION NO: 123
Which method should an LDAP administrator use to take advantage of the IBM Tivoli Directory
Server V6.1 Performance and Tuning Tool?
A. run the provided sample script that generates workload based on the o=sample suffix
B. generate as much multi-threaded traffic to the server as possible while running the
Performance and Tuning Tool
C. generate representative workload that closely models the normal server traffic while running the
Performance and Tuning Tool
D. create as much traffic as possible to the server and continually change the different DB2 tuning
parameters while it is running, then check the results
Answer: C
QUESTION NO: 124
In a distributed directory environment, what is the best strategy for organizing a single large user
group on the back end servers?
A. organize all group data on a single backend server
B. duplicate the full group data on each backend server
C. organize group data equally across the backend servers
D. split the group in half anddistribute each half equally across the backend servers
Answer: A
QUESTION NO: 125
Users cannot log in if their passwords need to be reset. What can be done to allow the users to log
in?
A. Users run theidsldapchangepwd command.
B. Users delete thepwdReset attribute from their own entries.
C. Users runidsldapmodify to change their userPassword attributes.
D. The administrative user deletes theibm-accountLocked attribute from the user entry.
Answer: A
QUESTION NO: 126
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 38
ITRealExams.com
Which group structure is most efficient in terms of performance?
A. Static groups
B. Hybrid groups
C. Nested groups
D. Dynamic groups
Answer: A
QUESTION NO: 127
Which type of IBM Tivoli Directory Server V6.1 supported key store allows the usage of a stash
file?
A. JKS
B. CMS
C. JCEKS
D. PKCS15
Answer: B
QUESTION NO: 128
What is a goal of IBM Tivoli Directory Server V6.1 server tuning?
A. to minimize the usage of ACLs
B. to reduce the size of individual entries so they can be returned more quickly
C. to use fewer groups in order to reduce the number of cross-tree searches that LDAP must
conduct
D. to tune ITDS V6.1 server caches and DB2 tuning parameters to minimize the number of
requests that require hard disk access
Answer: D
QUESTION NO: 129
What is the default login and password for the IBM Tivoli Directory Server V6.1 Web
Administration console?
A. user:cn=root, password: secret
B. no users are configured by default
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 39
ITRealExams.com
C. user:superadmin, password: secret
D. user:superadmin, password:
Answer: C
QUESTION NO: 130
What is the best way to implement simple failover functionality using two IBM Tivoli Directory
Server V6.1 servers?
A. You restore the ITDS V6.1 server from a backup.
B. You set up a peer-to-peer topology. If either peer fails, you route application traffic to the
remaining available peer.
C. Set up a master-replica topology and promote the replica to a master if the master fails.
Redirect all application traffic to the newly promoted master.
D. You set up the first ITDS V6.1 server as a proxy server and the second server as a standalone
back end server. You have the proxy server route traffic depending on the availability of the
backend server.
Answer: B
QUESTION NO: 131
Which operational attribute returns all password policy attributes for a given entry?
A. +ibmpwdpolicy
B. ibm-pwdPolicy
C. ++idspwdpolicy
D. +passwordMinAlphaChars
Answer: A
QUESTION NO: 132
What is a supported key store type for the IBM Tivoli Directory Server V6.1 server?
A. JKS
B. IBM
C. CMS
D. PKCS15
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 40
ITRealExams.com
Answer: C
QUESTION NO: 133
Which two options must be unique for each IBM Tivoli Directory Server V6.1 instance configured
on a single system? (Choose two.)
A. log files
B. TCP port
C. DB2 version
D. DNS hostname
E. DB2 buffer pools
Answer: A,B
QUESTION NO: 134
While importing an LDIF file, you get unexpected results when the import encounters attributes
containing non-ASCII characters. Which action allows all the data to be imported?
A. re-import the LDIF omitting the affected data
B. re-import the LDIF specifying the correct character set
C. re-import the LDIF substituting the affected characters
D. re-create the IBM Tivoli Directory Server V6.1 instance using another codepage
Answer: B
QUESTION NO: 135
Which parameter impacts the behavior of the DB2 search optimizer?
A. MAXFILOP
B. LOCKTIMEOUT
C. LDAP_MAXCARD
D. DB2_PARALLEL_IO
Answer: C
QUESTION NO: 136
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 41
ITRealExams.com
User1 has been described with an inetOrgPerson objectclass. User1 is member of group1, which
is defined as static group with objectclass groupOfNames. If the user1 is deleted from the IBM
Tivoli Directory Server V6.1 server, what happens to group membership?
A. Membership in static group1 is updated automatically.
B. Membership in static group1 must be updated manually.
C. Membership in static group1 must be updated using ITDS extended operations.
D. Membership in static group1 must be updated with refresh time defined in theibmslapd.conf file.
Answer: A
QUESTION NO: 137
Which two factors are most important for tuning the IBM Tivoli Directory Server V6.1 DB2
database? (Choose two.)
A. DB2COMM
B. DB2 instance
C. DB2 table size
D. APPLHEAPSZ
E. DB2 buffer pools
Answer: D,E
QUESTION NO: 138
Which application must be installed for the log management utility to work?
A. IBM Tivoli Directory Integrator
B. IBM Tivoli Directory Applications
C. IBM Tivoli Directory White Pages
D. IBM Tivoli Directory Server Web Administration Tool
Answer: A
QUESTION NO: 139
What is the minimum number of certificates needed per key store when using client Server
Authentication?
A. 1
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 42
ITRealExams.com
B. 2
C. 3
D. 4
Answer: B
QUESTION NO: 140
When evaluating change entries in the change log, which attribute indicates the operation
performed on the target object?
A. function
B. changes
C. changetype
D. changenumber
Answer: C
QUESTION NO: 141
In which log file can you find the minimum ulimit requirements for an IBM Tivoli Directory Server
V6.1 server running in a UNIX environment?
A. audit.log
B. ibmslapd.log
C. perftune_stat.log
D. ldapdbproperties.log
Answer: B
QUESTION NO: 142
What is published as part of the audit log if the ibm-auditPerformance option is enabled and the
IBM Tivoli Directory Server V6.1 server is configured for full audit logging? (Choose three.)
A. time spent in disk I/O
B. time spent in client I/O
C. time spent in a child process
D. time spent in a worker queue
E. accumulated RDBM lock wait time
F. the number of RDBM locks acquired
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 43
ITRealExams.com
Answer: B,D,E
QUESTION NO: 143
Which command can be utilized to check for effective user password policy?
A. idspwdchk
B. idsldapexop
C. idsldapcompare
D. idsldapcheckpwd
Answer: B
QUESTION NO: 144
When administering an IBM Tivoli Directory Server V6.1 instance remotely via the ibmdirctl
administrative command, which two parameters should be used for finding the current status of
the LDAP service? (Choose two.)
A. status
B. condition
C. statusreturn
D. statuslogmgmt
E. statusinstance
Answer: A,C
QUESTION NO: 145
A user wants to bind with administrative privileges. What should be done before an IBM Tivoli
Directory Server V6.1 proxy is created?
A. bind as n=root
B. create a user with administrative privileges on the proxy server
C. users with administrative privileges cannot bind through a proxy server
D. add the user to thelobalGroupName=GlobalAdminGroup,cn=ibmpolicies group
Answer: C
QUESTION NO: 146
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 44
ITRealExams.com
Which action can be performed using the IBM Tivoli Directory Server V6.1 extended operation
tool?
A. encrypt attributes
B. suspend replication
C. configure password policy
D. configure ITDS V6.1 server for SSL-only mode
Answer: B
QUESTION NO: 147
Which three actions are supported by the LDAP extended operation tool? (Choose three.)
A. read the logs
B. perform online backup
C. create password policy
D. define replication agreement
E. quiesce a replication context
F. restart the IBM Tivoli Directory Server V6.1 server
Answer: A,B,E
QUESTION NO: 148
Which log contains errors about replication conflicts?
A. audit log
B. change log
C. server error log
D. lost and found log
Answer: D
QUESTION NO: 149
How are entries ordered in the IBM Tivoli Directory Server V6.1 server audit log file?
A. by chronological sequence
B. by sequence number generated by the audit log
C. by sequence number generated by the ITDS V6.1 server
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 45
ITRealExams.com
D. by sequence number generated in the Administrator console
Answer: A
QUESTION NO: 150
What is the best way to diagnose performance issues in the IBM Tivoli Directory Server V6.1
server?
A. review the lost and found log entries
B. review the audit log and look for bind operations
C. review the audit log entries for event notifications
D. review the audit log and look for time spent in worker queue
Answer: D
QUESTION NO: 151
You add a number of new custom attributes to the IBM Tivoli Directory Server V6.1 server
schema, but when you start up the server, you see messages in the ibmslapd.log that read:
GLPCOM031I The attribute column name column name is longer than 16 characters, so the first
16 characters of the specified column name truncated column name will be used.
What is the appropriate response in this situation?
A. redefine the attribute size provided in the custom schema definition
B. take no action as the data is unaffected and this message can be safely ignored
C. run a db2runstats to regenerate the DB2 statistics stored in the system catalogs for this table
D. drop the custom schema objects and connect with a version of Web Administration that
matches the version of the ITDS server
Answer: B
QUESTION NO: 152
A customer is having performance problems on their LDAP enabled client application, which have
been traced to their back end IBM Tivoli Directory Server V6.1 server. All logging has been turned
on to capture performance data. Which log is most useful in determining how long operations are
taking to run?
A. audit.log
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 46
ITRealExams.com
B. db2cli.log
C. ibmslapd.log
D. ibmdiradm.log
Answer: A
QUESTION NO: 153
Which two statements are true about the format of the GLPRPL022W error string, based on the
standard format for error messages? (Choose two.)
A. This message is a warning.
B. This message is printed by the referral process.
C. This message is printed by the replication process.
D. This message is printed by the Gateway Light Proxy component.
E. The message indicates the data should be resynchronized in the directory.
Answer: A,C
IBM 000-928: Practice Exam
000-928 IBM Tivoli Directory Server V6.1
Implementation
Practice Test
Version 3.0
QUESTION NO: 1
What makes up the LDAP schema?
A. only a person's name and phone numbers
B. definitions ofobjectclasses and attributes
C. a person's name and applications to be accessed
D. a list of other IBM Tivoli Directory Server V6.1 servers in the customer environment
Answer: B
QUESTION NO: 2
Which type of class is the top-most (top) object class in the LDAP schema?
A. abstract class
B. auxiliary class
C. linkedContainer class
D. extensibleObject class
Answer: A
QUESTION NO: 3
Which functions in a deployment are implemented by IBM Tivoli Directory Server V6.1?
A. web server setup for web applications
B. firewall setup for the network topology
C. LDAP proxy server setup for the LDAP environment
D. UNIX client application setup for the LDAP environment
Answer: C
QUESTION NO: 4
Which technology provides SSL security for the directory server?
A. a CRAM-MD5 technology
B. a message privacy technology
C. a public-key cryptographic technology
D. a technology to exchange names and dates
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 2
ITRealExams.com
Answer: C
QUESTION NO: 5
What change should be made first to the IBM Tivoli Directory Server V6.1 Web Administration
Tool's URL, if it is deployed in a full WebSphere Application Server (WAS)?
A. change the protocol from HTTP to HTTPS
B. change the hostname in the URL tolocalhost
C. change the port number in the URL to the WAS port number
D. change the context root for the URL to the WAS default context root
Answer: C
QUESTION NO: 6
Which installation option is available for the IBM Tivoli Directory Server V6.1 Directory White
Pages?
A. a single ITDS V6.1 proxy server
B. EmbeddedWebSphere Application Server
C. an ITDS V6.1 instance replicating with another ITDS V6.1 instance
D. an ITDS V6.1 instance acting as a gateway in a corporate-wide replication configuration
Answer: B
QUESTION NO: 7
If IBM Tivoli Directory Server V6.1 is installed with an existing Active Directory installation, which
two ports will already be in use? (Choose two.)
A. 80
B. 389
C. 636
D. 9080
E. 12104
Answer: B,C
QUESTION NO: 8
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 3
ITRealExams.com
Which two IBM Tivoli Directory Server V6.1 components are absolutely necessary for a system to
be installed and configured as peer master server in a replicated topology? (Choose two.)
A. DB2
B. GSKit
C. ITDS V6.1 server
D. ITDS V6.1 proxy server
E. Web Administration Tool
Answer: A,C
QUESTION NO: 9
What is a prerequisite for IBM Tivoli Directory Server V6.1 Directory White Pages?
A. DB2 runtime client
B. LDAP C client SDK
C. Tivoli Directory Integrator
D. EmbeddedWebSphere Application Server
Answer: D
QUESTION NO: 10
What is the purpose of the db2ls command?
A. to provide the DB2 V9.1 version and install location information
B. to provide recursive listing of all files from a DB2 V9.1 instance
C. to provide recursive listing of all files from a DB2 V9.1 installation
D. to provide all available DB2 V8 and V9 instance names from the system
Answer: A
QUESTION NO: 11
Which operating system is an IBM Tivoli Directory Server V6.1 client only supported platform?
A. IBM AIX 5.2
B. HP-UX 11i V2
C. Sun Solaris 10
D. Microsoft Windows XP Professional
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 4
ITRealExams.com
Answer: D
QUESTION NO: 12
Which two statements are true about the idsucfgchglg command? (Choose two.)
A. Itunconfigures replication.
B. Itunconfigures the changelog.
C. It removes thechangelog database.
D. Itunconfigures the database backend.
E. It can be run when the server is running.
Answer: B,C
QUESTION NO: 13
Which statement is true about autonomic cache configuration attributes?
A. They cannot be manipulated.
B. They are dynamically configurable.
C. They are not stored in theibmslapd.conf file.
D. They can be set only through the Web Administration Tool.
Answer: B
QUESTION NO: 14
Which condition must be met before a database can be configured with an IBM Tivoli Directory
Server V6.1 instance?
A. The user must have no unread mail.
B. The user must have an email account.
C. The user can be deleted from the system.
D. The user name can be used to log in to the machine.
Answer: D
QUESTION NO: 15
Which two utilities are required for managing logs in IBM Tivoli Directory Server V6.1? (Choose
two.)
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 5
ITRealExams.com
A. idslgmt
B. idsicrt
C. idslogmgmt
D. idslogmanagement
E. Web Administration Tool
Answer: C,E
QUESTION NO: 16
Which utility can be used to configure an IBM Tivoli Directory Server V6.1 instance as a proxy?
A. idsimgr
B. idsxinst
C. idsproxy
D. idsldapxcfg
Answer: B
QUESTION NO: 17
Regarding the instance owner, which three tasks need to be performed on UNIX operating
systems prior to creating the instance? (Choose three.)
A. create the user
B. add user to the root group
C. add the user to the system group
D. add the user to theidsldap group
E. verify the user has remote shell enabled
F. set the users password and verify the password is ready for use
Answer: A,D,F
QUESTION NO: 18
Which statement is true about configuring an attribute cache if the autonomic attribute cache is not
used?
A. The filter cache works as the attribute cache.
B. The attribute cache can be configured manually.
C. Attribute caching must be set in the DB2 database.
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 6
ITRealExams.com
D. It is not possible to configure an attribute cache if the autonomic attribute cache is not used.
Answer: B
QUESTION NO: 19
What is the default time interval for the IBM Tivoli Directory Server V6.1 log management tool to
check log file sizes?
A. 5 minutes
B. 15 minutes
C. 30 minutes
D. 60 minutes
Answer: B
QUESTION NO: 20
What must be done prior to importing encrypted data via an LDIF file, extracted from an existing
IBM Tivoli Directory Server V6.1 instance, into a new instance?
A. configure the database for online backup
B. distribute the original LDIF into multiple smaller LDIF files
C. manually edit the LDIF file to remove allcn=localhost entries
D. cryptographically synchronize the new instance with the original ITDS V6.1 instance
Answer: D
QUESTION NO: 21
Which three steps must be taken (at a minimum) to implement an instance running in normal
mode when an instance does not currently exist? (Choose three.)
A. create instance
B. configure suffix
C. configurechangelog
D. configure a DB2 database
E. configure database buffer pools
F. configure administrator DN and password
Answer: A,D,F
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 7
ITRealExams.com
QUESTION NO: 22
Which statement is true about the replication administrator and directory data administrator roles?
A. They have equivalent rights.
B. They have nothing in common.
C. The administrative rights of the directory data administrator are a subset of the replication
administrator.
D. The administrative rights of the directory data administrator are a superset of the replication
administrator.
Answer: D
QUESTION NO: 23
What is an invalid administration DN?
A. cn=root
B. cn=admin
C. o=ibm,c=us
D. cn=admin,configuration
Answer: D
QUESTION NO: 24
What is the name of the changelog database?
A. ldapclog
B. changelog
C. ldapchange
D. user-defined
Answer: A
QUESTION NO: 25
Which corresponding data structure is created in DB2 during an IBM Tivoli Directory Server V6.1
instance creation?
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 8
ITRealExams.com
A. table
B. instance
C. database
D. tablespace
Answer: B
QUESTION NO: 26
Which file contains newly added attribute definitions by default?
A. V3.ibm.at
B. V3.ibm.oc
C. V3.schema
D. V3.modifiedschema
Answer: D
QUESTION NO: 27
What are two features of the IBM Tivoli Directory Server V6.1 proxy server? (Choose two.)
A. failover
B. failback
C. transactions
D. filter-based distribution
E. priority-based load balancing
Answer: A,B
QUESTION NO: 28
You have multiple IP addresses on a system where a new IBM Tivoli Directory Server V6.1
instance will be configured. By default, which IP addresses does the IBM Tivoli Directory Server
V6.1 instance bind to?
A. all IP addresses on the OS
B. the alias IP address of the OS
C. the primary IP address of the OS
D. the IP address assigned to the system hostname
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 9
ITRealExams.com
Answer: A
QUESTION NO: 29
Which two types of replicas can be created using the idsideploy tool? (Choose two.)
A. peers
B. routers
C. replicas
D. gateways
E. forwarders
Answer: A,C
QUESTION NO: 30
Which two suffixes are present by default in an IBM Tivoli Directory Server V6.1 instance?
(Choose two.)
A. o=ibm,c=us
B. cn=localhost
C. cn=pwdpolicy
D. cn=changelog
E. cn=ibmpolicies
Answer: B,E
QUESTION NO: 31
Which two fields are logged in a typical audit log entry? (Choose two.)
A. server ID
B. time stamp
C. connection ID
D. server IP address
E. emergency thread status
Answer: B,C
QUESTION NO: 32
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 10
ITRealExams.com
Which two methods can be used for pass-through authentication when attribute mapping is not
specified? (Choose two.)
A. Pass-through authentication is notbe supported in this situation.
B. The actual ITDS V6.1 server searches for a mapping entry on the pass-through LDAP server.
C. The actual IBM Tivoli Directory Server V6.1 server creates its own attribute mapping logic.
D. The entry on the actual ITDS V6.1 server maps directly to a similar entry in the pass-through
LDAP server.
E. The entry on the actual ITDS V6.1 server explicitly maps to some entry on the pass-through
LDAP server.
Answer: D,E
QUESTION NO: 33
Which two methods are used to create a custom LDAP schema? (Choose two.)
A. update the V3.modifiedschema file
B. update the V3.userdefinedschema file
C. add a custom schema text file using theidscfgsch command
D. define a cn=modifiedschema suffix and load it with custom schema
E. define a cn=schema suffix and load it with custom schema using idsaddsch
Answer: A,C
QUESTION NO: 34
Which IBM Tivoli Directory Server component from previous versions can co-exist with IBM Tivoli
Directory Server V6.1?
A. ITDS client
B. ITDS server
C. proxy server
D. Web Administration Tool
Answer: A
QUESTION NO: 35
Which task must be manually performed during a typical IBM Tivoli Directory Server V6.1
upgrade?
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 11
ITRealExams.com
A. schema migration
B. database migration
C. backup custom suffix list
D. backup custom schema files
Answer: D
QUESTION NO: 36
What is the impact of migrating one IBM Tivoli Directory Server in a peer replication topology?
A. There is no impact.
B. Differences in schema may cause replication failures.
C. The migrated peer master server becomes a read only replica.
D. The migrated ITDS server fails to start because of incorrect server ID.
Answer: B
QUESTION NO: 37
Which document describes the migration procedures for IBM Tivoli Directory Server V6.1 from
previous releases?
A. Quick Start Guide
B. System Requirements document
C. Installation and Configuration Guide
D. What's New for This Releasedocument
Answer: C
QUESTION NO: 38
What is the purpose of the command migbkup?
A. to back up the database
B. to back up the data in the form of LDIF file
C. to back up the configuration and schema files
D. to migrate to IBM Tivoli Directory Server V6.1 across systems
Answer: C
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 12
ITRealExams.com
QUESTION NO: 39
Which two components must be migrated for an IBM Tivoli Directory Server V6.1 proxy server
migration? (Choose two.)
A. configuration
B. DB2 database
C. custom schema
D. server certificate
E. replication agreements
Answer: A,C
QUESTION NO: 40
Which two tasks are accomplished during Web Administration Tool migration? (Choose two.)
A. The Web Administration Tool graphical user interface is preserved.
B. The previous version of Web Administration Tool's configuration is preserved.
C. The previous version of EmbeddedWebSphere Application Server configuration is preserved.
D. The latest Web Administration Tool is deployed into the existing EmbeddedWebSphere
Application Server.
E. The existing Web Administration Tool is deployed into the new EmbeddedWebSphere
Application Server.
Answer: B,C
QUESTION NO: 41
Which command line utility is used to generate key stores so that SSL/TLS encryption can be
utilized in the IBM Tivoli Directory Server V6.1 environment?
A. gsk7ikm
B. idscfgKey
C. idscfgSSL
D. gsk7capicmd
Answer: D
QUESTION NO: 42
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 13
ITRealExams.com
When is multi-threaded replication considered?
A. when data consistency is critical
B. when scheduled replication is enabled
C. when the environment has a high update rate
D. when servers are taken offline for a daily backup
Answer: C
QUESTION NO: 43
After optimizing all heap sizes and buffer pools, the system administrator notices that the disk I/O
is extremely high. What is the likely cause?
A. network congestion
B. CPU utilization at 100%
C. system depleted of virtual memory
D. system depleted of physical memory
Answer: D
QUESTION NO: 44
What are two required locations for storing a proxy authorization group? (Choose two.)
A. cn=localhost
B. cn=pwdPolicy
C. cn=ibmpolicies
D. cn=proxy,cn=configuration
E. ou=proxy group, o=company
Answer: A,C
QUESTION NO: 45
What is the most important DB2 maintenance task that must be performed on a regular basis to
keep the IBM Tivoli Directory Server V6.1 server performing optimally?
A. db2reorgchk against all tables
B. db2reorg the indexes for the attribute tables
C. db2runstats using the idsrunstats utility or via the idsxcfg tool
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 14
ITRealExams.com
D. drop and recreate the backend database so the rows in DB2 are contiguous
Answer: C
QUESTION NO: 46
Which file does the data partitioning utility use to split the data from a given LDIF file?
A. the ibmslapd.log from the proxy server
B. theibmslapd.conf from the proxy server
C. the ibmslapd.log from the backend server
D. theibmslapd.conf from the backend server
Answer: B
QUESTION NO: 47
An LDAP administrator creates three new password policies in a suffix on his IBM Tivoli Directory
Server V6.1 server and applies them to three different groups. Even though the password policies
were successfully applied to the groups, the password policies are not being applied to any of the
users. What is the likely explanation for this?
A. Password policy cannot be applied to group objects.
B. You can only have one password policy enabled per suffix.
C. Theibm-pwdPolicy attribute for the global password policy settings has been set to FALSE.
D. The ITDS V6.1 server was never restarted. Password policy changes require a server restart.
Answer: C
QUESTION NO: 48
Which supported SSL key store type is used with the IBM Tivoli Directory Server V6.1 Web
Administration Tool?
A. CMS
B. KDB
C. JKS
D. JCEKS
Answer: C
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 15
ITRealExams.com
QUESTION NO: 49
For schema changes to replicate, which subtree needs to be configured for replication?
A. cn=schema
B. o=ibm,c=us
C. cn=replication
D. cn=ibmpolicies
Answer: D
QUESTION NO: 50
Which two schema files are necessary for a successful server startup? (Choose two.)
A. V3.user.at
B. V3.idsrules
C. V3.attributes
D. V3.ldapsyntaxes
E. V3.objectclasses
Answer: A,D
QUESTION NO: 51
Which kind of authentication is enabled between the IBM Tivoli Directory Server V6.1 client and
server by the serverAuth authentication method?
A. one-way authentication
B. two-way authentication
C. biometric authentication
D. challenge-response authentication
Answer: A
QUESTION NO: 52
Which statement is true about password policy support in IBM Tivoli Directory Server V6.1?
A. Password policy can only be set at the suffix level.
B. Password policy can be set at a group or user level.
C. Password policy is determined by a user's group membership.
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 16
ITRealExams.com
D. Password policy is set once globally and equally applies to all users in all suffixes on the server.
Answer: B
QUESTION NO: 53
When configuring the Web Administration Tool console for SSL, which two fields must point to the
key store? (Choose two.)
A. Trust database path and file name
B. JKS key database path and file name
C. CMS key database path and file name
D. KDB key database path and file name
E. PKCS11 key database path and file name
Answer: A,B
QUESTION NO: 54
Which two elements must be used when defining a custom objectclass in the schema? (Choose
two.)
A. attributes
B. ldapsyntaxes
C. objectclasses
D. matchingrules
E. IBMattributeTypes
Answer: A,C
QUESTION NO: 55
Which command can be used to create an access control list for the directory information tree in
IBM Tivoli Directory Server V6.1?
A. idsxcfg
B. idsaddacl
C. idsimportacl
D. idsldapmodify
Answer: D
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 17
ITRealExams.com
QUESTION NO: 56
Which type of objectclass defines a server as a gateway server?
A. ibm-peerGateway
B. ibm-serverGateway
C. ibm-masterGateway
D. ibm-replicaGateway
Answer: D
QUESTION NO: 57
When administering an IBM Tivoli Directory Server V6.1 instance remotely via the ibmdirctl
administrative command, which parameter should be used for finding the current status of log
management services?
A. status
B. condition
C. statusreturn
D. statuslogmgmt
Answer: D
QUESTION NO: 58
Where are the configuration settings kept for the log management utility?
A. in the system registry
B. in the idslogmgmt.cfg file
C. in thecn=ibmpolicies subtree
D. in theibmslapd.conf file for the instance
Answer: D
QUESTION NO: 59
After performing an extract of Server A and a subsequent import of the LDIF into Server B, how
can you verify whether the trees are synchronized?
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 18
ITRealExams.com
A. use theidsldapdiff utility to compare the trees for differences
B. extract Server B to an LDIF and compare to the original Server A LDIF
C. redirect an idsldapsearch of Server A to an idsldapmodify of Server B
D. extract Server B to an LDIF and use it as an input for an idsldapmodify to Server A
Answer: A
QUESTION NO: 60
Which three steps must be taken if a certificate is compromised? (Choose three.)
A. restart the administration services
B. delete the certificate from the system
C. remove the root certificate for the host
D. add the certificate to the CRL list in the key store
E. modify thecn=CRL,cn=SSL,cn=Configuration object
F. restart the IBM Tivoli Directory Server V6.1 server services
Answer: A,E,F
QUESTION NO: 61
What should be done when using the db2 reorg command?
A. restartibmslapd before running db2 reorg
B. switch user to root before running db2reorg
C. performidsrunstats after running db2 reorg
D. performidsrunstats before running db2 reorg
Answer: C
QUESTION NO: 62
Which tool can be utilized to optimize DB2 buffer pools for IBM Tivoli Directory Server V6.1?
A. db2buff
B. idsdbbuff
C. idsperftune
D. db2setbufferpools
Answer: C
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 19
ITRealExams.com
QUESTION NO: 63
A new attribute type has been added to all of the back end IBM Tivoli Directory Server V6.1
servers. A search sent through the ITDS V6.1 proxy does not return the new attribute type, but the
same search sent directly to the back end ITDS V6.1 servers does. What is the cause?
A. The ITDS V6.1 proxy schema has not been updated.
B. The new attribute type is actually a schema violation.
C. The back end ITDS V6.1 servers did not return the new attribute type.
D. The new attribute type is binary, and the ITDS V6.1 proxy does not support binary attribute
types.
Answer: A
QUESTION NO: 64
What does the idsldapdiff command do?
A. synchronizes any entries that do not match
B. lists entries in the master server most recently added to the replica server
C. highlights entries in the replica server when entry date and time do not match
D. displays entries in the replica server that are larger than corresponding entries in the master
server
Answer: A
QUESTION NO: 65
You have master-replica replication, and you notice that the replica server is not running. Which
command tries to push replication again after restarting the replica server?
A. idsldapexop -op quiesce -rc
B. idsldapexop -op controlreplerr -action resume -c
C. idsldapexop -op controlrepl -action resume -rc
D. idsldapexop -op controlreplerr -retry all -a < ReplicationAgreement>
Answer: D
QUESTION NO: 66
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 20
ITRealExams.com
Which three parameters are required to execute idsldapexop over a TLS connection? (Choose
three.)
A. K
B. P
C. Q
D. S
E. T
F. Z
Answer: A,B,F
QUESTION NO: 67
A user belongs to two search limit groups. Group1 has a limit of 100 entries and 10 seconds.
Group2 has a limit of 50 entries and 50 seconds. What are the user's search limitations?
A. 50 entries and 50 seconds
B. 50 entries and 10 seconds
C. 100 entries and 50 seconds
D. 100 entries and 10 seconds
Answer: C
QUESTION NO: 68
Which two tasks should be performed at regular intervals based on the updates coming into the
IBM Tivoli Directory Server V6.1 server? (Choose two.)
A. run db2reorgchk
B. perform database migration
C. run theidsrunstats command
D. upgrade to the latest level of ITDS and DB2fixpacks
E. monitor the ibmslapd.log file for errors related to performance
Answer: A,C
QUESTION NO: 69
You find that the number of objects in the directory has increased substantially. You run
idsrunstats, but the utility takes an excessive amount of time to complete. Which database
configuration parameter can be changed to increase the performance of idsrunstats?
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 21
ITRealExams.com
A. LOGFILSIZ.
B. LOCKTIMEOUT
C. STAT_HEAP_SZ
D. LDAP_MAXCARD
Answer: C
QUESTION NO: 70
Which suffix contains entries for directory changes if configured correctly?
A. cn=changelog
B. cn=logs, cn=changes
C. cn=changelog, cn=monitor
D. cn=changes, cn=ibmpolicies
Answer: A
QUESTION NO: 71
A customer installs an IBM Tivoli Directory Server V6.1 proxy server, and they want to ensure that
writes to the directory are available for immediate reads. What should be configured on the proxy
to support this function?
A. High consistency must be enabled.
B. Global transactions across all ITDS V6.1 servers must be enabled.
C. Read operations should always be routed to a single ITDS V6.1 server.
D. The priority for one back end ITDS V6.1 server should be higher than the other back end ITDS
V6.1 servers.
Answer: A
QUESTION NO: 72
Which feature can be configured using the idsxcfg utility?
A. replication
B. password policy
C. access control list
D. database optimization
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 22
ITRealExams.com
Answer: D
QUESTION NO: 73
IBM Tivoli Directory Server V6.1 audit logs show only failed logins. What should be done so that
successful logins are also tracked?
A. increase audit logging to log level 3
B. increase audit logging to log level 4
C. neverturn on audit logging to record successful operations
D. turn on auditing for successful operations as well as failed operations
Answer: D
QUESTION NO: 74
What is the best way to identify a memory leak problem with IBM Tivoli Directory Server V6.1?
A. monitor processor usage
B. monitor the SSL connections
C. monitor process memory usage
D. review the operating system logs
Answer: C
QUESTION NO: 75
The ibmslapd server has started up in configuration-only mode, and you believe it is because the
DB2 user's password has been changed.
Which log file would you check to find the specific error returned by DB2 to the server?
A. audit.log
B. db2cli.log
C. db2diag.log
D. ibmslapd.log
Answer: B
QUESTION NO: 76
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 23
ITRealExams.com
You are configuring replication between a supplier and a consumer in the Web Administration Tool
and it fails. Which two logs will help you resolve this error? (Choose two.)
A. audit.log from the supplier
B. ibmslapd.log from the supplier
C. ibmdiradm.log from the supplier
D. ibmdiradm.log from the consumer
E. ibmslapd.log from the targeted consumer
Answer: B,E
QUESTION NO: 77
The IBM Tivoli Directory Server V6.1 server is starting in configuration-only mode, and after
consulting the relevant logs, you find the following error message appears to be the cause of the
failure:
SQL30082N Attempt to establish connection failed with security reason "1" ("PASSWORD
EXPIRED"). SQLSTATE=08001
How do you resolve this issue?
A. determne if the root administrative account in LDAP has expired
B. change the password of the DB2 user in the operating system that LDAP uses to connect to
DB2
C. enable audit logging to determine what operation is sending in the request causing this error
D. add a new user to the administrative group in LDAP to change the password of the original
admin user
Answer: B
QUESTION NO: 78
Which log file records failed connection attempts?
A. operating system log file
B. IBM Tivoli Directory Server V6.1 SSL log file
C. IBM Tivoli Directory Server V6.1 client log file
D. IBM Tivoli Directory Server V6.1 server log file
Answer: D
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 24
ITRealExams.com
QUESTION NO: 79
Which statement is true about the namespace specified by the LDAP Naming Model?
A. Each name must end with "o=world".
B. Attributes are used to construct the names of objects.
C. Each component of a name must begin with a lower case alphabetic character.
D. The depth of the tree structure is unlimited but must have at least three levels.
Answer: B
QUESTION NO: 80
What does the default IBM Tivoli Directory Server V6.1 deployment contain?
A. one ITDS V6.1 server instance and a remote DB2 database
B. one ITDS V6.1 server instance and one DB2 database on one single machine
C. several ITDS V6.1 server instances distributed across many geographical areas
D. one ITDS V6.1 server instance and multiple DB2 databases on a second UNIX machine
Answer: B
QUESTION NO: 81
Which method is used for authentication in IBM Tivoli Directory Server V6.1?
A. use of an LDAP PIN number
B. basic and simple authentication
C. a process and procedure from the Business Operations department
D. anonymous authentication and valid user name from Active Directory
Answer: B
QUESTION NO: 82
Which edition of DB2 is absolutely required for IBM Tivoli Directory Server V6.1 full server
instance?
A. DB2 UDBEnterprise Server
B. DB2 UDB Workgroup Server
C. DB2 UDB Personal on Windows and Linux
D. DB2 UDB Run-Time, Administration, and Application Development Clients
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 25
ITRealExams.com
Answer: C
QUESTION NO: 83
Which DB2 version is included with the IBM Tivoli Directory Server V6.1?
A. DB2 V9.1 Fix Pack 7
B. DB2 V8.1 Fix Pack 2
C. DB2 V8.2 Fix Pack 1
D. DB2 V9.1 Fix Pack 2
Answer: D
QUESTION NO: 84
Which three functions does the Tivoli Directory White Pages application provide for users?
(Choose three.)
A. add a user
B. search for users
C. change password
D. search the schema
E. manage console server
F. administer instance configuration
Answer: A,B,C
QUESTION NO: 85
Which component must be installed if installing the IBM Tivoli Directory Server V6.1 proxy server?
A. LDAP C client SDK
B. LDAP Java client SDK
C. Web Administration Tool
D. no component need be installed
Answer: A
QUESTION NO: 86
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 26
ITRealExams.com
What is the context root for the IBM Tivoli Directory Server V6.1 Web Administration Tool?
A. /
B. /TDS
C. /IDSjsp
D. /IDSWebApp
Answer: D
QUESTION NO: 87
A customer wants to install an IBM Tivoli Directory Server V6.1 instance on a platform with an
existing ITDS V5.2 instance. What should the customer do?
A. migrate the ITDS V5.2 server to an ITDS V6.1 server
B. install the ITDS V6.1 server to coexist with an ITDS V5.2 server
C. install the ITDS V6.1 server and use a proxy to link the ITDS V5.2 server
D. create an IBM Tivoli Directory Server V6.1 instance using the DB2 backend from the ITDS V5.2
server
Answer: A
QUESTION NO: 88
Which component of IBM Tivoli Directory Server V6.1 is provided as a separate installation
image?
A. LDAP client SDK
B. LDAP proxy server
C. Directory White Pages
D. Web Administration Tool
Answer: C
QUESTION NO: 89
Which two statements are true about the idsucfgdb utility? (Choose two.)
A. It canunconfigure suffixes.
B. It does not need instance name as an input.
C. It automaticallyunconfigures the changelog.
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 27
ITRealExams.com
D. It can remove the configured database if needed.
E. It is used tounconfigure a database associated with a directory server instance.
Answer: D,E
QUESTION NO: 90
Which two statements are true about password migration in pass-through authentication?
(Choose two.)
A. It is enabled by default.
B. It is disabled by default.
C. The password migration is done only if the bind on the pass-through LDAP server is successful.
D. The encryption scheme of the pass-through LDAP server is used even on the actual IBM Tivoli
Directory Server V6.1 server.
E. Maintaining the consistency of passwords across the actual ITDS V6.1 server and
thepassthrough LDAP server is the responsibility of IBM Tivoli Directory Server V6.1.
Answer: B,C
QUESTION NO: 91
What are the minimum and maximum limits for the encryption seed value?
A. minimum 10, maximum 100
B. minimum 10, maximum 999
C. minimum 12, maximum 1016
D. minimum 10, maximum 1012
Answer: C
QUESTION NO: 92
Which two are valid suffixes? (Choose two.)
A. cn=root
B. cn,o=ibm
C. dn: admin
D. dn: ibm,us
E. o=ibm,c=us
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 28
ITRealExams.com
Answer: A,E
QUESTION NO: 93
Which statement is true about configuring an attribute cache if the autonomic attribute cache is not
used?
A. The filter cache works as the attribute cache.
B. The attribute cache can be configured manually.
C. Attribute caching must be set in the DB2 database.
D. It is not possible to configure an attribute cache if the autonomic attribute cache is not used.
Answer: B
QUESTION NO: 94
You create an entry of objectclass person, with a DN cn=manager,cn=ibmpolicies. You add this
entry into the global administrative group on all backend servers. You are now logged on to the
proxy using the Web Administration Tool as cn=manager,cn=ibmpolicies. Which task can you
perform?
A. start and stop the proxy server
B. configure the health check timer
C. view the combined data from all back end servers
D. determine the status of all of the back end servers
Answer: C
QUESTION NO: 95
Which two utilities can be used to configure an IBM Tivoli Directory Server V6.1 instance as a
proxy? (Choose two.)
A. idsicrt
B. idsimgr
C. ldapxcfg
D. idsxinst
E. idsproxy
Answer: A,D
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 29
ITRealExams.com
QUESTION NO: 96
What is the most important consideration when configuring DB2 for online backup?
A. amount of disk space
B. number of DB2tablespaces
C. number of DB2 connections
D. amount of physical memory
Answer: A
QUESTION NO: 97
What is a way to invalidate an administrative user without deleting the user entry?
A. delete the ibm-slapdAdminRole from the user entry
B. redefine the user entry with the nvalid objectclass
C. in the user entry, setibm-slapdAdminRole to NOADMIN
D. add an attribute ibm-slapdInvalidAdmin to the user entry and set it to TRUE
Answer: C
QUESTION NO: 98
Which attribute is used to enable or disable the audit log?
A. ibm-audit
B. enable-audit
C. ibm-auditlog
D. disable-audit
Answer: A
QUESTION NO: 99
Which tool is used to split data in a distributed directory setup?
A. ddsplit
B. ddsetup
C. idsldapdiff
D. idsproxysetup
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 30
ITRealExams.com
Answer: B
QUESTION NO: 100
When must the synchronization occur in order to cryptographically synchronize two IBM Tivoli
Directory Server V6.1 instances, where server A is already configured and server B is the new
instance?
A. before configuring the instance on server B
B. after starting the new instance on server B for the first time
C. before starting the new instance on server B for the first time
D. before adding the directorysuffix(es) to the instance on server B
Answer: C
QUESTION NO: 101
Which three utilities can be used to modify the IBM Tivoli Directory Server V6.1 schema? (Choose
three.)
A. idsxinst
B. idscfgsch
C. idsldapadd
D. idsldapdelete
E. idsldapmodify
F. Web Administration Tool
Answer: B,E,F
QUESTION NO: 102
Which two tools can be used to configure the changelog with an IBM Tivoli Directory Server V6.1
instance? (Choose two.)
A. idsxcfg
B. idscfgchglg
C. idscfgchangedb
D. idscfgchangelog
E. Web Administration Tool
Answer: A,B
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 31
ITRealExams.com
QUESTION NO: 103
What rules apply to the IBM Directory Server V6.1 database instance name and the database
name?
A. Instance name and database name can differ.
B. Instance name and database name must be the same.
C. Database name must be the same as the database owner name.
D. Instance name must be the same as the database owner's password.
Answer: A
QUESTION NO: 104
Which two utilities can be used to configure the administrator DN and password? (Choose two.)
A. idsicrt
B. idsxcfg
C. idsdnpw
D. idscfgdb
E. idscfgpw
Answer: B,C
QUESTION NO: 105
When is the attribute cache refreshed if autonomic attribute cache is used? (Choose two.)
A. every day
B. every 15 minutes
C. every 60 minutes
D. depends on the cache settings
E. every time the server is restarted
Answer: D,E
QUESTION NO: 106
Why is it necessary to have online backup enabled on the source instance when idsideploy is
being used?
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 32
ITRealExams.com
A. It improves performance.
B. It requires circular logging.
C. It allows the database copy to be created when the server is up and running.
D. It allows the database copy to be created with more security than offline backup.
Answer: C
QUESTION NO: 107
Which condition must be met during the user creation stage when creating the instance owner?
A. The user must be namedidsinst.
B. The user must be named ldapdb2.
C. The user must have a complex password ready for use.
D. The user root must be a member of the user's primary group.
Answer: D
QUESTION NO: 108
On a UNIX system, which directory is created after an instance called instance1 is successfully
created?
A. /var/instance1
B. /home/instance1
C.
D.
Answer: D
QUESTION NO: 109
Which software is required for running the IBM Tivoli Directory Server V6.1log management tool?
A. IBM Tivoli Access Manager
B. IBM Tivoli Storage Manager
C. IBM Tivoli Directory Integrator
D. WebSphere Application Server
Answer: C
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 33
ITRealExams.com
QUESTION NO: 110
What is the preferred migration solution in an environment where the IBM Tivoli Directory Server
contains a large number of entries?
A. migrate using the DB2 utilities
B. export and import the data in the form of an LDIF file
C. perform the migration using theidsbulkload command
D. perform the migration using theidsimigr and idsdbmigr commands
Answer: D
QUESTION NO: 111
What happens when you upgrade from IBM Tivoli Directory Server V6.0 to ITDS V6.1?
A. ITDS V6.1 upgrade backs up the existing ITDS V6.0 instance.
B. ITDS V6.1 automaticallymigrates the existing ITDS V6.0 instance.
C. ITDS V6.1 upgrade does nothing with the existing ITDS V6.0 instance.
D. ITDS V6.1 instance gets deployed, based on the existing ITDS V6.0 instance.
Answer: C
QUESTION NO: 112
What can be done to correct the format of a backup schema file during a migration of IBM Tivoli
Directory Server?
A. verify the V3.modifiedschema file has no read-only bit set
B. verify the V3.modifiedschema file contains no multiple blank lines between stanzas
C. verify the V3.modifiedschema file contains no new line character in the middle of a definition
D. verify the V3.modifiedschema file for previous and new server instances has the same date and
time
Answer: A
QUESTION NO: 113
Which statement is true about a migration to IBM Tivoli Directory Server V6.1?
A. Instance deployment can be used to perform migration.
B. IBM Tivoli Directory Server V6.1 allows online migration.
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 34
ITRealExams.com
C. The existing ITDS servers must be stopped before starting the migration.
D. IBM Tivoli Directory Server V6.1 uses the replication feature for migration.
Answer: C
QUESTION NO: 114
Which type of data store is used to save custom LDAP schema related to IBM Tivoli Directory
Server V6.1?
A. text files
B. XML files
C. CSV files
D. HTML files
Answer: A
QUESTION NO: 115
What must you do to perform a database migration from an existing IBM Tivoli Directory Server
V5.1 environment on AIX V5.2, with DB2 V8.x Workgroup Server Edition to an ITDS V6.1 server
with DB2 V9.x?
A. uninstall ITDS V5.1 completely
B. upgrade DB2 and migrate the DB2 instance
C. perform an ITDS instance migration directly
D. perform replication setup between the ITDS V5.1 and ITDS V6.1 for data migration
Answer: B
QUESTION NO: 116
What is the correct procedure for migrating an IBM Tivoli Directory Server V5.2 environment that is
on AIX V5.1 (unsupported for ITDS V6.1) to ITDS V6.1 on AIX V5.3 (supported for ITDS V6.1)?
A. run the idsimigr command
B. perform a manual migration of configuration, schema, and data
C. run the idsideploy command to clone ITDS V5.2 on an ITDS V6.1 system
D. upgrade the OS on ITDS V5.2 system to an OS level supported by ITDS V6.1
Answer: B
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 35
ITRealExams.com
QUESTION NO: 117
Which two tasks are accomplished during the Web Administration Tool migration? (Choose two.)
A. The list of console servers is preserved.
B. The SSL properties of Web Administration Tool are preserved.
C. The SSL properties of Web Administration Tool are reset to default settings.
D. The Web Administration Tool console administrator and password settings are reset to default.
E. The IBM Tivoli Directory Server V6.1 server default instance information is added into list of
console servers.
Answer: A,B
QUESTION NO: 118
Which command line utility is used to modify the configuration to add a schema file?
A. idsaddsch
B. idscfgsch
C. idsaddschema
D. idscfgschema
Answer: B
QUESTION NO: 119
Which two password policy enhancements are provided for IBM Tivoli Directory Server V6.1?
(Choose two.)
A. ACL-based policy
B. schema-based policyCGSKit used to enforce policy
C. user and group-based policies
D. policy enforced for DIGEST-MD5 binds
Answer: C,D
QUESTION NO: 120
Web Administration Tool is configured for SSL with a secure connection type of SSL. What
happens if you attempt to log in to a running IBM Tivoli Directory Server V6.1 server on a non-SSL
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 36
ITRealExams.com
port?
A. The login fails.
B. The login is successful.
C. The connection is refused.
D. The login displays a warning message.
Answer: B
QUESTION NO: 121
Given the following replication filter:
dn: cn=replicationfilter, cn=localhost
objectclass: ibm-replicationFilter
ibm-replicationFilterAttr: (objectclass=person):(cn,sn,userPassword)
ibm-replicationFilterAttr: (objectclass=inetOrgPerson):!(userPassword,employeeNumber)
ibm-replicationFilterAttr: (objectclass=*): !(*)
Which two statements are true? (Choose two.)
A. No entries will be replicated.
B. For any entry that is not of typeroup or emberOf no attributes will be replicated.
C. For any entry that is not of typeerson or netOrgPerson, no attributes will be replicated.
D. Entries that contain botherson and netOrgPerson objectclasses will replicate the attribute
userPassword.
E. Entries that contain botherson and netOrgPerson objectclasses will replicate the attributes cn
and sn only.
Answer: C,E
QUESTION NO: 122
What is the maximum allowable length of an attribute that needs to be indexed?
A. 240 bytes
B. 320 bytes
C. 512 bytes
D. 1024 bytes
Answer: A
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 37
ITRealExams.com
QUESTION NO: 123
Which method should an LDAP administrator use to take advantage of the IBM Tivoli Directory
Server V6.1 Performance and Tuning Tool?
A. run the provided sample script that generates workload based on the o=sample suffix
B. generate as much multi-threaded traffic to the server as possible while running the
Performance and Tuning Tool
C. generate representative workload that closely models the normal server traffic while running the
Performance and Tuning Tool
D. create as much traffic as possible to the server and continually change the different DB2 tuning
parameters while it is running, then check the results
Answer: C
QUESTION NO: 124
In a distributed directory environment, what is the best strategy for organizing a single large user
group on the back end servers?
A. organize all group data on a single backend server
B. duplicate the full group data on each backend server
C. organize group data equally across the backend servers
D. split the group in half anddistribute each half equally across the backend servers
Answer: A
QUESTION NO: 125
Users cannot log in if their passwords need to be reset. What can be done to allow the users to log
in?
A. Users run theidsldapchangepwd command.
B. Users delete thepwdReset attribute from their own entries.
C. Users runidsldapmodify to change their userPassword attributes.
D. The administrative user deletes theibm-accountLocked attribute from the user entry.
Answer: A
QUESTION NO: 126
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 38
ITRealExams.com
Which group structure is most efficient in terms of performance?
A. Static groups
B. Hybrid groups
C. Nested groups
D. Dynamic groups
Answer: A
QUESTION NO: 127
Which type of IBM Tivoli Directory Server V6.1 supported key store allows the usage of a stash
file?
A. JKS
B. CMS
C. JCEKS
D. PKCS15
Answer: B
QUESTION NO: 128
What is a goal of IBM Tivoli Directory Server V6.1 server tuning?
A. to minimize the usage of ACLs
B. to reduce the size of individual entries so they can be returned more quickly
C. to use fewer groups in order to reduce the number of cross-tree searches that LDAP must
conduct
D. to tune ITDS V6.1 server caches and DB2 tuning parameters to minimize the number of
requests that require hard disk access
Answer: D
QUESTION NO: 129
What is the default login and password for the IBM Tivoli Directory Server V6.1 Web
Administration console?
A. user:cn=root, password: secret
B. no users are configured by default
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 39
ITRealExams.com
C. user:superadmin, password: secret
D. user:superadmin, password:
Answer: C
QUESTION NO: 130
What is the best way to implement simple failover functionality using two IBM Tivoli Directory
Server V6.1 servers?
A. You restore the ITDS V6.1 server from a backup.
B. You set up a peer-to-peer topology. If either peer fails, you route application traffic to the
remaining available peer.
C. Set up a master-replica topology and promote the replica to a master if the master fails.
Redirect all application traffic to the newly promoted master.
D. You set up the first ITDS V6.1 server as a proxy server and the second server as a standalone
back end server. You have the proxy server route traffic depending on the availability of the
backend server.
Answer: B
QUESTION NO: 131
Which operational attribute returns all password policy attributes for a given entry?
A. +ibmpwdpolicy
B. ibm-pwdPolicy
C. ++idspwdpolicy
D. +passwordMinAlphaChars
Answer: A
QUESTION NO: 132
What is a supported key store type for the IBM Tivoli Directory Server V6.1 server?
A. JKS
B. IBM
C. CMS
D. PKCS15
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 40
ITRealExams.com
Answer: C
QUESTION NO: 133
Which two options must be unique for each IBM Tivoli Directory Server V6.1 instance configured
on a single system? (Choose two.)
A. log files
B. TCP port
C. DB2 version
D. DNS hostname
E. DB2 buffer pools
Answer: A,B
QUESTION NO: 134
While importing an LDIF file, you get unexpected results when the import encounters attributes
containing non-ASCII characters. Which action allows all the data to be imported?
A. re-import the LDIF omitting the affected data
B. re-import the LDIF specifying the correct character set
C. re-import the LDIF substituting the affected characters
D. re-create the IBM Tivoli Directory Server V6.1 instance using another codepage
Answer: B
QUESTION NO: 135
Which parameter impacts the behavior of the DB2 search optimizer?
A. MAXFILOP
B. LOCKTIMEOUT
C. LDAP_MAXCARD
D. DB2_PARALLEL_IO
Answer: C
QUESTION NO: 136
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 41
ITRealExams.com
User1 has been described with an inetOrgPerson objectclass. User1 is member of group1, which
is defined as static group with objectclass groupOfNames. If the user1 is deleted from the IBM
Tivoli Directory Server V6.1 server, what happens to group membership?
A. Membership in static group1 is updated automatically.
B. Membership in static group1 must be updated manually.
C. Membership in static group1 must be updated using ITDS extended operations.
D. Membership in static group1 must be updated with refresh time defined in theibmslapd.conf file.
Answer: A
QUESTION NO: 137
Which two factors are most important for tuning the IBM Tivoli Directory Server V6.1 DB2
database? (Choose two.)
A. DB2COMM
B. DB2 instance
C. DB2 table size
D. APPLHEAPSZ
E. DB2 buffer pools
Answer: D,E
QUESTION NO: 138
Which application must be installed for the log management utility to work?
A. IBM Tivoli Directory Integrator
B. IBM Tivoli Directory Applications
C. IBM Tivoli Directory White Pages
D. IBM Tivoli Directory Server Web Administration Tool
Answer: A
QUESTION NO: 139
What is the minimum number of certificates needed per key store when using client Server
Authentication?
A. 1
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 42
ITRealExams.com
B. 2
C. 3
D. 4
Answer: B
QUESTION NO: 140
When evaluating change entries in the change log, which attribute indicates the operation
performed on the target object?
A. function
B. changes
C. changetype
D. changenumber
Answer: C
QUESTION NO: 141
In which log file can you find the minimum ulimit requirements for an IBM Tivoli Directory Server
V6.1 server running in a UNIX environment?
A. audit.log
B. ibmslapd.log
C. perftune_stat.log
D. ldapdbproperties.log
Answer: B
QUESTION NO: 142
What is published as part of the audit log if the ibm-auditPerformance option is enabled and the
IBM Tivoli Directory Server V6.1 server is configured for full audit logging? (Choose three.)
A. time spent in disk I/O
B. time spent in client I/O
C. time spent in a child process
D. time spent in a worker queue
E. accumulated RDBM lock wait time
F. the number of RDBM locks acquired
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 43
ITRealExams.com
Answer: B,D,E
QUESTION NO: 143
Which command can be utilized to check for effective user password policy?
A. idspwdchk
B. idsldapexop
C. idsldapcompare
D. idsldapcheckpwd
Answer: B
QUESTION NO: 144
When administering an IBM Tivoli Directory Server V6.1 instance remotely via the ibmdirctl
administrative command, which two parameters should be used for finding the current status of
the LDAP service? (Choose two.)
A. status
B. condition
C. statusreturn
D. statuslogmgmt
E. statusinstance
Answer: A,C
QUESTION NO: 145
A user wants to bind with administrative privileges. What should be done before an IBM Tivoli
Directory Server V6.1 proxy is created?
A. bind as n=root
B. create a user with administrative privileges on the proxy server
C. users with administrative privileges cannot bind through a proxy server
D. add the user to thelobalGroupName=GlobalAdminGroup,cn=ibmpolicies group
Answer: C
QUESTION NO: 146
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 44
ITRealExams.com
Which action can be performed using the IBM Tivoli Directory Server V6.1 extended operation
tool?
A. encrypt attributes
B. suspend replication
C. configure password policy
D. configure ITDS V6.1 server for SSL-only mode
Answer: B
QUESTION NO: 147
Which three actions are supported by the LDAP extended operation tool? (Choose three.)
A. read the logs
B. perform online backup
C. create password policy
D. define replication agreement
E. quiesce a replication context
F. restart the IBM Tivoli Directory Server V6.1 server
Answer: A,B,E
QUESTION NO: 148
Which log contains errors about replication conflicts?
A. audit log
B. change log
C. server error log
D. lost and found log
Answer: D
QUESTION NO: 149
How are entries ordered in the IBM Tivoli Directory Server V6.1 server audit log file?
A. by chronological sequence
B. by sequence number generated by the audit log
C. by sequence number generated by the ITDS V6.1 server
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 45
ITRealExams.com
D. by sequence number generated in the Administrator console
Answer: A
QUESTION NO: 150
What is the best way to diagnose performance issues in the IBM Tivoli Directory Server V6.1
server?
A. review the lost and found log entries
C. review the audit log entries for event notifications
D. review the audit log and look for time spent in worker queue
Answer: D
QUESTION NO: 151
You add a number of new custom attributes to the IBM Tivoli Directory Server V6.1 server
schema, but when you start up the server, you see messages in the ibmslapd.log that read:
GLPCOM031I The attribute column name column name is longer than 16 characters, so the first
16 characters of the specified column name truncated column name will be used.
What is the appropriate response in this situation?
A. redefine the attribute size provided in the custom schema definition
B. take no action as the data is unaffected and this message can be safely ignored
C. run a db2runstats to regenerate the DB2 statistics stored in the system catalogs for this table
D. drop the custom schema objects and connect with a version of Web Administration that
matches the version of the ITDS server
Answer: B
QUESTION NO: 152
A customer is having performance problems on their LDAP enabled client application, which have
been traced to their back end IBM Tivoli Directory Server V6.1 server. All logging has been turned
on to capture performance data. Which log is most useful in determining how long operations are
taking to run?
A. audit.log
IBM 000-928: Practice Exam
"Pass Any Exam. Any Time." - www.ITRealExams.com 46
ITRealExams.com
B. db2cli.log
C. ibmslapd.log
D. ibmdiradm.log
Answer: A
QUESTION NO: 153
Which two statements are true about the format of the GLPRPL022W error string, based on the
standard format for error messages? (Choose two.)
A. This message is a warning.
B. This message is printed by the referral process.
C. This message is printed by the replication process.
D. This message is printed by the Gateway Light Proxy component.
E. The message indicates the data should be resynchronized in the directory.
Answer: A,C
IBM 000-928: Practice Exam

No comments:
Post a Comment
Your comments are valuable to me..Thank you.