Apple Server
OS X Server Essentials 10.8
OS X Server Essentials 10.8
-
- 1 / 124
-
Cartes-fiches
What are the advantages of using NetBoot?
Because NetBoot unifies and centralizes the system software
that NetBoot clients use, software configuration and
maintenance are reduced to a minimum. A single change to a
NetBoot image propagates to all client computers on the
next startup. NetBoot also decouples the system software
from the computer, decreasing potential time invested in
software troubleshooting.
What are three ways to configure the network startup disk?
A client can select a network disk image via the Startup pane
within System Preferences; hold down the N key at startup to
use the default NetInstall image; or use the Option key to
enter the Startup Manager.
Which network protocols are used during the NetInstall
startup sequence? What components are delivered over each
of these protocols?
NetInstall makes use of DHCP, TFTP, NFS, and HTTP during the
NetInstall client startup sequence. DHCP provides the IP
address, TFTP delivers the boot ROM (“booter”) file, and NFS
or HTTP deliver the network disk image.
What is a NetBoot shadow file?
Because the NetBoot boot image is read-only, anything that
the client computer writes to the volume is cached in the
shadow file. This allows a user to make changes to the boot
volume, including setting preferences and storing files;
however, when the computer is restarted, all changes are
erased.
What are the major differences between NetBoot, NetInstall,
and NetRestore images?
NetBoot allows multiple computers to boot into the same
environment. NetInstall provides a convenient way to install
operating systems and packages onto multiple computers.
NetRestore provides a way to clone an existing image to
multiple computers.
What are the advantages of using Software Update?
You can better administer updates to clients and prevent
high-bandwidth usage from your clients all reaching out to
the Apple update servers, keeping the traffic within your
network.
What are three logs available to monitor the service?
Service, Error, and Access.
How can you configure a client to use the update service?
Using the defaults command to modify the update plist or a
configuration profile.
What is the default port used?
The default port is 8088. This is important as it needs to be
defined in the catalog URL even though it isn’t shown in the
configuration panes of the Server app.
What level of management can Software Update be applied
to in Profile Manager?
Devices and device groups.
What services must be running for Time Machine to provide a
network backup target?
File Sharing and Time Machine.
If you change the volume that Time Machine is backed up to,
what will happen from the client side?
An entire backup will occur, rather than just the changes from
the last backup.
Why might you want to exclude certain folders from being
backed up?
You might exclude certain folders to preserve space or to
avoid backing up unneeded material.
Can you recover what was in the Trash?
No, the contents in the Trash aren’t backed up.
What kind of users would benefit from using the VPN service?
Users who are away from your local network can use the VPN
service to securely access resources available on your local
network.
What is an easy way to help your users running OS X to
quickly configure their computers to use your server’s VPN
service?
In the Server app sidebar, select VPN, click Save Configuration
Profile, and distribute the resulting mobileconfig file to your
users. When a user of a computer running OS X Lion or
Mountain Lion opens the mobileconfig file, the Profiles
What two protocols does the OS X Server VPN service
support?
L2TP and PPTP.
What are the differences between the two supported VPN
protocols?
L2TP is more secure, but PPTP is compatible with older VPN
client software.
If the shared secret becomes discovered, does this mean that
anyone in the world can now use your server’s VPN service?
Not necessarily; even if the shared secret becomes published,
users still need to authenticate with a username and
password to establish a VPN connection.
What do you need to do if you decide to change the shared
secret?
If you change the shared secret, all your VPN service users
must change the shared secret in their VPN configurations.
You can facilitate this change by saving a new configuration
profile and distributing the new mobileconfig file to your
users.
If a host computer or device is on an active network with
other clients receiving DHCP addresses, why might this
specific computer or device not get an IPv4 address?
If other computers and devices on a given network are able
to secure DHCP addresses, it’s likely that the server has run
out of DHCP leases.
How can you determine whether a host has a routable IPv4
address or a link-local address?
Because a link-local address must fall in the 169.254.x.x range,
checking the current IPv4 address of the client will provide
the answer.
Before you can statically map an IPv4 address to a specific
client, what must you know before you can create a static
address for that client?
You must know the MAC address of the client; if the client
already has a DHCP lease, simply create a static address from
that client’s entry in the Clients pane.
Where would you find log entries related only to the DHCP
service?
You would find log entries only related to the DHCP service in
the Server app’s Logs pane (in the Service Log under the
DHCP section).
On what software is the OS X Server Websites service based?
The Websites service is based on Apache, the open source
web server software.
Which permissions are necessary on a web folder to ensure
that visitors to the site can access the pages?
Everyone or the “www” group must have read access to the
web files.
What are access controls?
Access controls are paths to folders that can be restricted
based on group.
Where is the default location for the Apache log files?
The default location for the Apache log files is /var/log/
apache2/access_log and /var/log/apache2/error_log.
What is the advantage of using SSL on a website?
SSL helps protect the traffic traveling to and from the website
by encrypting the data.
What protocols can Mail service utilize?
POP, IMAP, and SMTP.
What kind of DNS record should be set up for a mail server in
production use?
An MX record for the domain.
What tools are used for filtering the Mail service?
SpamAssassin filters for spam; ClamAV provides virus
scanning; and an external blacklist server can be set for junk
mail filtering.
What is a wiki? What is a blog?
A wiki is designed to be read and edited by many. A blog is
designed to be read by many, but created by an individual.
What tools can an administrator use to specify users that are
allowed to create wikis?
Administrators can use the Wiki Creators list in the Wiki
service settings of the Server app.
How does a network user specify which users and groups are
allowed to edit a wiki?
When creating a wiki with a web browser, a user can specify
permissions for users and groups to access and edit the wiki.
What protocol does Calendar use?
CalDAV, which is an extension of WebDAV.
How does a user specify which users are allowed to edit or
view his calendar?
In the Calendar app preferences, he can designate delegates
and their rights.
What is the transport protocol for the Calendar service and
how can that impact the troubleshooting of the service?
CalDAV and WebDAV utilize HTTP as a transport and as a
result the troubleshooting of it is similar to web services. You
need to make sure DNS is correct and the proper ports are
open.
What protocol is used for the Messages service?
The Messages service uses the Extensible Messaging and
Presence Protocol (XMPP).
How would you limit access to the Messages service on OS X
Server?
Through “Edit Access to Services” per user available in the
Server app.
