Lesson 8: System Security Flashcards
Understand password types and their usage; Use a variety of meth- ods to reset lost user passwords; Manage user and sys- tem security settings
What does the master password do?
The master password can only be used to reset local account passwords.
What methods can be used to reset a user’s lost account password?
Local account passwords can be reset:
- By an administrator in Users & Groups
- The master password at login
- An Apple ID at login
- A FileVault 2 recovery key at startup
- By the Reset Password application in OS X Recovery
How does a user that changes his own account password affect his login keychain?
When a user changes his own account password, the system will keep his login keychain password in sync.
How does resetting a user’s account password affect that user’s login keychain?
Any account password reset process will not change any keychain passwords. Therefore, the user’s keychains will not automatically open when the user logs in with her new password. The user will have to manually change her keychain passwords using the Keychain Access utility.
How does resetting the master password affect existing Legacy FileVault user accounts?
If a master password is reset because it was lost, Legacy FileVault accounts cannot be reset by the new master password.
How can you limit the use of Location Services?
The Privacy pane of the Security & Privacy preferences can be used to verify or disable applications’ access to Location Services and other personal information.
What can you enable to locate a lost Mac system?
iCloud Find My Mac allows you to remotely locate a lost Mac or iOS device.
How does the Firmware Password Utility help prevent users from making unauthorized password changes?
The Firmware Password Utility prevents users from starting up from another system disk. This in turn prevents them from using an OS X Recovery system to reset local passwords without authorization.
