Flashcards in Mac OS X Server 10.9 Deck (136)
What additional configuration do you need to perform for eligible computers with OS X and for iOS devices to use the Caching service?
No additional configuration is required for computers with OS X version 10.8.2 or later, or for iOS 7 devices.
If your server has a public IPv4 address (as opposed to having a private IPv4 address behind NAT), and your clients have a private IPv4 address behind NAT, will your clients use your server’s Caching service?
No, your clients and your server must have private IPv4 addresses behind a NAT device that translates outgoing traffic (to the Internet) to use the same public IPv4 address.
What configuration is required if you have multiple servers with the Caching service turned on?
You don’t need to perform any additional configuration; eligible clients will use the appropriate Caching server automatically.
Can a Mac use the Software Update service and the Caching service simultaneously?
No, a Mac can use either the Software Update service or the Caching service.
If you change the volume used for the Caching service, is the cached content moved to the new volume?
Yes, if you change the volume for the Caching service, the Server app automatically moves the cached content to the new volume.
Will the Caching service fill up a volume with cached content?
No, the Caching service automatically removes the least recently downloaded item to make room for new content, after the volume has only 25GB available.
How much available space do you need on a volume in order to specify to use it for the Caching service?
The Server app requires that a volume have 50GB available before you can use it for the Caching service.
What are the advantages of using Software Update?
You can better administer updates to clients and prevent high-bandwidth usage from your clients all reaching out to the Apple update servers, keeping the traffic within your network.
What are three logs available to monitor the service?
Service, Error, and Access.
How can you configure a client to use the update service?
Use the defaults command to modify the update plist or a configuration profile.
What is the default port used?
The default port is 8088. This is important as it needs to be defined in the catalog URL even though it isn’t shown in the configuration panes of the Server app.
What level of management can Software Update be applied to in Profile Manager?
Devices and device groups.
What services must be running for Time Machine to provide a network backup target?
File Sharing and Time Machine.
If you change the volume that Time Machine is backed up to, what will happen from the client side?
An entire backup will occur, rather than just the changes from the last backup.
Why might you want to exclude certain folders from being backed up?
You might exclude certain folders to preserve space or to avoid backing up unneeded material.
Can you recover what was in the Trash?
No, the contents in the Trash aren’t backed up.
What kind of users would benefit from using the VPN service?
Users who are away from your local network can use the VPN service to securely access resources available on your local network.
What is an easy way to help your users running OS X to quickly configure their computers to use your server’s VPN service?
In the Server app sidebar, select VPN, click Save Configuration Profile, and distribute the resulting mobileconfig file to your users. When a user of a computer running OS X Lion or later opens the mobileconfig file, the Profiles preferences automatically opens and prompts the user to install the configuration profile. You can also distribute the mobileconfig file to users of iOS devices.
What two protocols does the OS X Server VPN service support?
L2TP and PPTP.
What are the differences between the two supported VPN protocols?
L2TP is more secure, but PPTP is compatible with older VPN client software.
If the shared secret becomes discovered, does this mean that anyone in the world can now use your server’s VPN service?
Not necessarily; even if the shared secret becomes published, users still need to authenticate with a username and password to establish a VPN connection.
What do you need to do if you decide to change the shared secret?
If you change the shared secret, all your VPN service users must change the shared secret in their VPN configurations. You can facilitate this change by saving a new configuration profile and distributing the new mobileconfig file to your users.
If a host computer or device is on an active network with other clients receiving DHCP addresses, why might this specific computer or device not get an IPv4 address?
If other computers and devices on a given network are able to secure DHCP addresses, it’s likely that the server has run out of DHCP leases.
How can you determine whether a host has a routable IPv4 address or a link-local address?
A link-local address must fall in the 169.254.x.x range, so checking the current IPv4 address of the client will provide the answer
What must you know before you can statically map an IPv4 address to a specific client?
You must know the MAC address of the client; if the client already has a DHCP lease, simply create a static address from that client’s entry in the Clients pane.
Where would you find log entries related only to the DHCP service?
In the Server app’s Logs pane (in the Service Log under the DHCP section).
On what software is the OS X Server Websites service based?
The Websites service is based on Apache, the open source web server software
Which permissions are necessary on a web folder to ensure that visitors to the site can access the pages?
Everyone or the “www” group must have read access to the web files.
What are access controls?
Access controls are paths to folders that can be restricted based on group.