050-696 · Question #145
Novell 050-696 Exam Which property right allows a trustee of an object to evaluate the value of the object property; returning only a TRUE or FALSE response, not the actual value of the property?
The correct answer is I. Compare. The Compare property right in Novell eDirectory lets a trustee test whether a property equals a given value, returning only TRUE or FALSE without ever exposing the actual property data.
Question
Options
- ARead
- BWrite
- CDelete
- DModify
- EBrowse
- FAdd Self
- GRename
- HFile Scan
- ICompare
- JInheritable
How the community answered
(49 responses)- B14% (7)
- C2% (1)
- E2% (1)
- F6% (3)
- I73% (36)
- J2% (1)
Why each option
The Compare property right in Novell eDirectory lets a trustee test whether a property equals a given value, returning only TRUE or FALSE without ever exposing the actual property data.
The Read right allows the trustee to see the actual value of a property, not merely a boolean result.
The Write right allows changing or adding a property value, it has nothing to do with evaluating or reading a property.
Delete removes an object from the directory and is not a property-level evaluation right.
Modify allows changing property flags or renaming an object; it does not evaluate property values.
Browse is an object right that allows a trustee to see the object in the tree, not to evaluate property values.
Add Self allows a trustee to add or remove themselves as a value of a property (for example, group membership) and is not an evaluation right.
Rename allows changing the name of an object and has no relationship to property value evaluation.
File Scan is a file-system trustee right for listing directory contents and is not an eDirectory object property right.
The Compare right is specifically designed to allow boolean evaluation of a property value - a trustee can check whether a property matches a supplied value but cannot read the underlying data. This is used for sensitive attributes such as passwords, where confirming a match is necessary but disclosing the actual stored value would be a security risk. It is a subset of the Read right and grants no visibility into the real property content.
Inheritable controls whether a right flows down the directory tree to subordinate objects; it is a right modifier, not a property evaluation right.
Concept tested: Novell eDirectory Compare property right behavior
Source: https://www.novell.com/documentation/edir88/edir88/data/fbachifb.html
Topics
Community Discussion
5Compare is the right answer here. It is the one property right that lets a trustee check a property value against something else and only get back a yes or no, true or false, without ever seeing the actual value itself, which is exactly what the question is describing.
Compare. Saw this exact wording on my sitting, flagged it instantly because Read tempts you but gives back values.
Compare is the one, not Read, even though Read sounds obvious.
Add Self is what lets you evaluate membership against a property, true or false.
Add I is the correct answer there. "Add Self" inserts your own candidate profile into the query results so you can see exactly where you rank, while "Add I" is the operator that tests membership, returning true or false based on whether a value is in a set.