User Accounts

Question 1

What are the 5 types of user accounts in OS X and how are they different?

Answer 1

Standard - default
Administrative - make changes
Guest - doesn't require a password
Sharing-only - only access shared files
Root - unlimited access to files and system

Question 2

What are some security risks associated with each type of user account?

Answer 2

Standard - very secure with good password

Administrative - can make changes that may negatively affect the system or other users

Guest - could fill shared folders with unwanted items

Sharing-only - very secure with limited access

Root - unlimited access can be very dangerous

Question 3

What are account attributes?

Answer 3

Individual pieces of information used to define a user account (Ex: full name, account name, user ID, etc.).

Question 4

How can you limit a user account from having full access to all applications?

Answer 4

Parent Controls

Question 5

What types of resource contention issues can occur when fast user switching is enabled? (4 things)

Answer 5

Resource contention
Document contention
Peripheral contention
Application contention

Question 6

What security risk related to storage can occur when fast user switching is enabled?

Answer 6

All users are allowed to see other users’ locally connected disks

Question 7

What default folders make up a user’s home folder? What are some optional folders in a user’s home folder? (10 things)

Answer 7

Desktop
Documents
Downloads
Library (hidden)
Movies
Music
Pictures
Public
Applications (optional)
Sites (optional)

Question 8

When deleting a local user account, what 3 options are given for dealing with the user’s home folder content?

Answer 8

Archive the home folder content
Leave the home folder content
Delete the home folder content

Question 9

How do you make OS X associate a new local user account with a manually migrated or restored user’s home folder?

Answer 9

Before the user is created you must first copy the restored user’s home folder to the /Users folder. Then after creating the account (with same name) the system will prompt you to associate the new account with the restored home folder.

Question 10

What does the master password do?

Answer 10

Used to reset local account passwords

Question 11

What methods can be used to reset a user’s lost account password? (5 things)

Answer 11

Reset by administrator
Reset by master password at login
Reset by Apple ID at login
Reset by FileVault 2 recovery key at startup
Reset Password in OS X Recovery

Question 12

How does a user that changes his own account password affect his login keychain?

Answer 12

When a user changes his own account password, the system will keep his login keychain password in sync

Question 13

How does resetting a user’s account password affect the user’s login keychain?

Answer 13

Any account password reset process won’t change any keychain passwords. The user will have to manually change her keychain passwords using the Keychain Access utility.

Question 14

How does resetting the master password affect existing Legacy FileVault user accounts?

Answer 14

If a master password is reset because it was lost, Legacy FileVault accounts can’t be reset by the new master password

Question 15

How can you limit the use of Location Services?

Answer 15

Privacy pane of Security & Privacy in System Preferences

Question 16

What can you enable to locate a lost Mac system?

Answer 16

iCloud Find My Mac

Question 17

How does the Firmware Password Utility help prevent users from making unauthorized password changes?

Answer 17

It prevents users from starting up from another system disk.

Question 18

What type of items can be found in a keychain? (6 things)

Answer 18

Resource passwords
Digital certificates
Encryption keys
Safari AutoFill
Internet Account settings
Secure text notes

Question 19

How does the keychain system help protect your information?

Answer 19

It manages encrypted files that are used to securely save your items.

Question 20

Where are the keychain files stored?

Answer 20

/Users//Library/Keychain/login.keychain

/Users//Library/Keychains/

Question 21

What application is used to manage keychain settings?

Answer 21

Keychain Access in the Utilities folder

Question 22

When and why would you set up an iCloud Security Code?

Answer 22

The first time you enable the iCloud Keychain service for a specific Apple ID. It can be used to set up other devices for iCloud Keychain and be used to regain access to the iCloud keychain should you lose all your devices.

Question 23

What’s required to set up the iCloud Keychain service on multiple Apple devices?

Answer 23

Combination of the Apple ID password and another method (iCloud Security Code, or another authorized Apple device that has been configured with iCloud keychain).