EMC Legato Cert E20-465 Questions & Answers

• Question 11:

  A TCS-enabled repository has documents containing both legal and medical information about employees.

  Such documents should only be accessible only by people that belong to both the LEGAL and MEDICAL

  groups.

  Which ACL settings meet this requirement?

  

  A. Exhibit A

  B. Exhibit B

  C. Exhibit C

  D. Exhibit D

  Correct Answer: A

• Question 12:

  Users should be able to access documents only if they are citizens of a NATO country, and if they are granted Top Secret clearance. Users in the system are members of a group matching their country of citizenship. What Permission set structure will fulfill this requirement? 4 * Contains a group for each NATO country 9 * Contains a group for each NATO country and the Top Secret group.

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

• Question 13:

  An object has an ACL with the r_application_permit field set to 'batch print' and r_permit_type to

  'ApplicationPermit.'

  How does the server treat this object?

  A. The server does not take this value into account.

  B. The server denies printing of this document to the server's default printer.

  C. The server denies printing of this document in a batch to the server's default printer.

  D. The server does not generate the default Post Script rendition of the document.

  Correct Answer: A

• Question 14:

  Your organization has a TCS-enabled repository with an HR group defined. All HR documents created get the 'HR documents' ACL applied to them, which gives the HR group VERSION permission. There is an AUDITORS group in the HR group that should only have READ permission. How would you grant VERSION permission to HR and only READ permission to AUDITORS?

  A. You create a new HR_editors group with all the HR members except the AUDITORS and use in the'HR documents' ACL as follows:

  B. You use the existing groups as follows:

  C. You create a new HR_editors group with all the HR members except the AUDITORS and use in the'HR documents' ACL as follows:

  D. You use the existing groups as follows:

  Correct Answer: D

• Question 15:

  How do you turn off the mandatory access control (MACL) capability from your repository?

  A. issue the DQL statement: update dm_sysobject ( all ) objects set r_composite_label = 'acl' where r_composite_label = 'macl'

  B. set the attribute macl_security_disabled to true on the dm_docbase_config object

  C. update the system default ACL to have the attribute i_has_required_groups as false

  D. change the dm_server_config objects r_trusted_mode attribute from 'macl' to 'acl'

  Correct Answer: B

• Question 16:

  Which users can configure an audit trail?

  A. any member of the docu group

  B. any coordinator or contributor in the dm_superusers group

  C. a coordinator or contributor with extended privileges

  D. a coordinator or contributor with the role of queue_admin

  Correct Answer: C

• Question 17:

  Which statement is true about audit trails?

  A. A non-admin user with config audit trail extended privilege can configure audit trails.

  B. By default, superusers have rights to configure audit trails.

  C. By default, system administrators have the right to configure audit trails.

  D. A person with purge audit trail extended privileges will automatically have config audit trail extended privileges.

  Correct Answer: A

• Question 18:

  What is the purpose of the dm_audittrail_acl object type?

  A. It indicates which ACL to apply to the audit trail entries.

  B. It is a special type for ACL change events.

  C. It stores information about ACL changes on dm_sysobject objects.

  D. It is a type used to monitor changes made to groups belonging to ACLs.

  Correct Answer: B

• Question 19:

  How do you remove unwanted audit trail entries AND make sure the audit will not grow uncontrollably?

  A. instruct users to remove audit trail entries from their objects

  B. execute the PURGE_AUDIT method to remove unwanted audit entries

  C. schedule the dm_AuditMgt job using the Audit Management tool

  D. issue a DQL statement, such as delete dm_audittrail objects where datediff ( month ,time_stamp_utc , date ( today ) ) >= 3

  Correct Answer: C

• Question 20:

  How do you check if someone has tampered with audit trail entries that have been signed by the Content Server?

  A. use the verifyaudit API to check whether the audit trail entry is valid

  B. use the getevents API to check what event have been performed to the audit trail entry.

  C. use the validate API to check whether the audit trail entry has changed

  D. use the listmessage API to check what has happened to the audit trail object

  Correct Answer: A