9A0-385 Online Practice Questions and Answers

A company's news media website becomes unresponsive during an off-peak time. The AEM team investigates and identifies a DoS (Denial of Service) attack.

Which two security measures should the architect use to reduce the chances of another attack? (Choose two.)

A. Change the passwords for default out-of-the box users (admin, author)

B. Uninstall all sample content and users that ship out of the box with AEM

C. Disable the default selectors .feed.xml and .infinity.json

D. Implement a Dispatcher filter to allow only known selectors

AEM installs default groups and users.

Which two concepts should the architect know about the admin, anonymous, and author users? (Choose two.)

A. Keep all three users as default

B. All default accounts should be deleted.

C. Modifying the anonymous account creates additional security implications.

D. Change the password for the admin account from the default.

A news company uses AEM to manage content. The company initially plans to provide news only to subscribers within Australia. Six months later, the company expands into the wider Asia region and requires Chinese and Korean language options. The architect must create a solution for a CMS with a multi-lingual requirement.

What is the most important factor for the architect to consider?

A. Creating a new language location for the dictionary

B. Translation workflows

C. Maintaining a common look and feel

D. Site structure

An architect is integrating a customer's AEM authoring system to authenticate with the company's Active Directory (AD) directory service. The architect must configure the LoginModule used by the identity provider.

Which Java security framework should the architect use?

A. OWASP

B. PAM

C. JAAS

D. Apache Shiro

Which three requirements, can be met by using AEM OOTB features/components? (Choose three.

A. Use Google + to personalize user content

B. Hide pages within content hierarchy

C. Index PDF documents uploaded to AEM repository

D. Enter additional data while approving workflow content

An architect must incorporate measures to prevent content grabbing. Which two recommendations should the architect configure? (Choose two.)

A. Apache Sling POST Servlet

B. Apache Sling GET Servlet

C. Dispatcher filter section

D. Dispatcher allowed Clients section

A packaged goods company is migrating its current site to AEM. The company has a presence in the US, but is expanding into two other countries within 12 months of launch on AEM.

During which two tasks should the architect consider this expansion goal? (Choose two.)

A. Site hierarchy definition

B. Component development

C. Workflow implementation

D. Content migration

In which type of architecture diagram would the architect be most likely to list the IP addresses of individual servers?

A. Physical

B. Logical

C. Conceptual

D. Data Flow

While conducting analysis during the discovery phase, several artifacts are obtained as outputs from activities such as surveys, questionnaires, and data gathering.

What is the LEAST significant option?

A. Mobile and tablet display features

B. Content types that must be migrated

C. Navigation structure

D. Page load speed

In AEM 5.6 and above, which two scenarios require that the Sling Referrer Filter's default configuration be changed? (Choose two.)

A. A JavaScript widget on an external website will be posting comments to an AEM page.

B. Automated scripts, using the curl command, will be executing HTTP PUT requests.

C. The SAML Authentication Handler is used to authenticate users.

D. The system host name does not match the external DNS name.