Part 2 User Accounts Lesson 5 - 8

Question 1

Name 5 Types of User Accounts.

Answer 1

1) Administrative
2) Standard
3) Guest
4) Sharing Only
5) Root Account

Question 2

Security Risk of Guest Account and what to do about it.

Answer 2

Can install apps and shut down/restart in Recovery mode.
Can also fill shared folders with unwanted files
Must use parental controls to restrict.

Question 3

Which account is best practice for general usage?

Answer 3

Standard.

Question 4

What access does Admin account have? Best Practices?

Answer 4

FULL access to all apps, prefs, users and root account.

Best practice to limit number of Admins to 1 user for system changes.

Question 5

Standard users can do 2 things but cannot?

Answer 5

Can install apps and system updates.

Cannot change anything that affects other users.

Question 6

Do shared and guest accounts have a home folder?

Answer 6

no.

Question 7

Root account access.

Answer 7

Unlimited access to EVERYTHING. Access by admin. Off by default.

Question 8

Where do you find user account attributes? What 9 items are shown?

Answer 8

Go to: System Prefs
-> User Accounts -> Right Click name 
Shown:
User ID
Group (staff by default)
Account 'Short' Name
Account Full Name
Login Shell (terminal path)
Home Directory path
UUID (universally unique identifier)
Alais names

Question 9

What 8 options can admin restrict with login window?

Answer 9

1) enable auto login
2) show list of users at start up
3) availability of Restart, Sleep, Shut Down
4) Input menu
5) show password hints
6) Fast user switching
7) Voice over app
8) Configure hosted network directory

Question 10

Sharing-Only Account advantage

Answer 10

Generally very secure since they cannot access the mac system. Can further secure using file and folder permissions.

Question 11

Which two password methods are supported by OS X Yosemite for local user accounts?

Answer 11

1) locally saved password

2) Apple ID password

Question 12

What 4 types of contention issues can occur when fast user switching is enabled?

Answer 12

1) RESOURCE when a user tries to access an item that another user has open in the background.
2) DOCUMENT contention occurs when a user attempts to open a document that another user has already opened.
3) PERIPHERAL contention occurs when a user attempts to access a peripheral that’s already in use by another user’s open application.
4) APPLICATION contention occurs when a second user attempts to access an application that has been designed to run only once on a system.

Question 13

Which storage-related security risk can occur when fast user switching is enabled?

Answer 13

All users are allowed to see other users’ locally connected disks.

Question 14

8 Parental control options:

Answer 14

1) Simple FInder
2) Limit applications
3) Safari contents
4) Limit addresses to exchange info with
5) Set time limits
6) Hide profanity
7) Restrict access to camera, passwords, media
8) Maintain safari, messages, usage logs

Question 15

A user’s home folder contains which 8 default folders? What are some 2 optional folders that can be added to a user’s home folder?

Answer 15

1 ) Desktop 
2) Documents
3) Downloads
4) Library (hidden) 
5) Movies
6) Music
7) Pictures
8) Public
Optional: Applications and Sites folders.

Question 16

What 3 options are given when you delete a local user account, along with optional item?

Answer 16

1) archive the home folder content into a compressed disk image,
2) leave the home folder content in the /Users folder,
3) delete the home folder content.
Optionally, perform a secure erase on folder content

Question 17

3 primary sources can Migration Assistant pull from?

Answer 17

1) other OS X systems
2) other Windows systems
3) other disks, including Time Machine backups.

Question 18

How do you make OS X associate a new local user account with a manually migrated or restored user’s home folder?

Answer 18

Name the home folder exact same name as new user account

Question 19

What security issue can be risked when copying a home folder?

Answer 19

Admin who has copied folder now has full permission to access all contents without password

Question 20

4 steps to restore a deleted user account:

Answer 20

1) Go to macHD -> Users -> Deleted Users.
2) Select the .dmg file and duplicate.
3 ) Rename duplicate and drag to “users” system folder
4) Create New User with EXACT same name as folder

Question 21

What does the master password do?

Answer 21

Used to reset local account passwords.

Question 22

When users change their own account password, how is their login keychain affected?

Answer 22

the system keeps their login keychain passwords in sync.

Question 23

5 types of passwords

Answer 23

1) Local accounts
2) Apple ID (can be used to reset local password)
3) Legacy Fire Vault
4) Keychain (encrypted)
5) Resource passwords (other services)

Question 24

What 2 options are available when you try to change the password for a user account?

Answer 24

Either change to a separate, locally saved password or to use Apple ID password

Question 25

Which 5 methods can be used to reset a user’s lost account password?

Answer 25

1) by an administrator in Users and Groups,
2) by the master password at login,
3) by a FileVault recovery key at startup,
4) Reset Password application in OS X Recovery.
5) Apple ID passwords can be reset online

Question 26

How does resetting the master password affect existing Legacy FileVault user accounts?

Answer 26

Legacy FileVault accounts cannot be reset by the new master password.

Question 27

How can you limit the use of Location Services?

Answer 27

In Security and Privacy preferences -> Privacy.

Allow or disallow applications’ access to Location Services, Contacts, Calendars, Reminders, and Accessibility

Question 28

How can you ensure that audio recordings used for Dictation service remain private?

Answer 28

By enabling User Enhanced Dictation feature (Dictation and Speech preferences)
Audio recordings aren’t sent to Apple

Question 29

How does the Firmware Password Utility help prevent users from making unauthorized password changes?

Answer 29

Prevents users from starting up from another system disk. which prevent use of Recovery System to reset local passwords without authorization.

Question 30

What 3 options can find my mac utility perform?

Answer 30

Lock
Erase
Send message

Question 31

To enable find my mac, must have these 4 things:

Answer 31

Wi-fi
OS X Recovery partition
iCloud
Guest login (which works as a trap)

Question 32

What happens if master password and fire vault password is lost:

Answer 32

CAN NEVER RECOVER

Question 33

If using fire vault, what is a vital?

Answer 33

Must know master password.

Question 34

Which 6 types of items can be stored in a keychain?

Answer 34

1) resource passwords,
2) digital certificates,
3) encryption keys
4) Safari AutoFill information,
5) Internet Account settings
6) secure text notes.

Question 35

How does the keychain system help protect your

information?

Answer 35

Uses encrypted files to securely save your items.
By default, all users have login and Local Items keychains that use the same password as their account. Not even other administrative users can access your keychain secrets without knowing the keychain’s password.

Question 36

Where are the 5 keychain types stored?

Answer 36

1) USER: /Users/ /Library/Keychain/ login.keychain
2) LOCAL: /Users// Library/Keychains/ folder.
3) ADMIN ACCESS: /Library/ Keychain/System.keychain
4) APPLE SYSTEM: maintains several items in /System/Library/Keychains/
5) FIREVAULT /Library/ Keychain/FireVaultMaster.keychain

Question 37

Keychain optional types of use?

Answer 37

Create additional keychains to segregate diff assets (ie trivial items, secure items)

Question 38

When and why would you set up an iCloud Security Code?

Answer 38

Set up the first time you enable the iCloud Keychain service for an Apple ID. The iCloud Security Code can be used to set up other devices for the iCloud Keychain service and can be used to regain access to the iCloud keychain if you lose all your Apple devices.

Question 39

What’s required to set up the iCloud Keychain service on multiple Apple devices?

Answer 39

Additional Apple devices must be authorized to use the iCloud Keychain service using a combination of the Apple ID password and another method. i.e. iCloud Security Code or authorize access from another Apple device that has already been configured

Question 40

How to repair a keychain file?

Answer 40

Keychain Access -> keychain first aid -> Repair

Question 41

If you forget keychain password:

Answer 41

contents lost forever. period