9L0625考试资料共享Word格式.docx

9L0625考试资料共享Word格式.docx

《9L0625考试资料共享Word格式.docx》由会员分享，可在线阅读，更多相关《9L0625考试资料共享Word格式.docx（38页珍藏版）》请在冰豆网上搜索。

AppleCertifiedSpecialist-SecurityandMobility（ACS-SaM）10.6.ToearnACS-SaM10.6,youmustalsoearnAppleCertifiedTechnicalCoordinator（ACTC）10.6certificationbypassingtheMacOSXSupportEssentials10.6Exam（examnumber9L0-403）andtheMacOSXServerEssentials10.6Exam（examnumber9L0-510）.

AppleCertifiedSystemAdministrator（ACSA）10.6.ToearnACSA10.6,youmustalsopasstheMacOSXServerEssentials10.6Exam（examnumber9L0-510）,theMacOSXDeployment10.6Exam（examnumber9L0-623）,andtheMacOSXDirectoryServices10.6Exam（examnumber9L0-624）

9L0-625考试目标：

ChapterOne:

ProvidingNetworkServices:

DNS

UponcompletionofChapterOne,“ProvidingNetworkServices:

DNS”,you

shouldbeabletocompletethefollowingtasks.Thenineitemsfromthis

chapterthatappearontheexamaredrawnrandomlyfromthefollowing

objectives:

•Withoutreferences,describesecurityvulnerabilitiesassociatedwiththe

DNSservice,including:

DNScachepoisoning,servermining,DNSserver

profiling,DenialofService（DoS）,andservicepiggybacking.

•GivenadefaultinstallationofMacOSXServerandaproperly

formattedexportofaDNSconfigurationfile,importaprimaryzonefor

agivendomain.

•GivenaproperlyconfiguredprimaryzoneandfunctionalDNSservices

onMacOSXServer,createasecondaryzoneforthegivendomainon

aseparateinstallationofMacOSXServertoestablishhighavailability.

onMacOSXServer,aproperlyconfiguredsecondaryzone,and

functionalDNSservicesonaseparateinstallationofMacOSXServer,

configureaprimaryzonetoacceptzonetransferrequestsfroma

specificsecondaryzone（whitelist）.

onaMacOSXServercomputer,verifyforwardandreverselookupsfor

aprimaryzone.

•Withoutreferences,definetheterm“DNSzone”.

onMacOSXServer,configureaprimaryzonetoforwardrequestsnot

containedwithinitsdomaintoaforwardzone.

•Withoutreferences,describethreetypesofDNSzones,including

master,slave,andforward.

onMacOSXServerconfigureaDNSsevertoprovidecaching-only

nameservicesbyclientsinternaltoacompany'

sintranetandrefuseall

externalqueries.

onMacOSXServer,configureaDNSservertoprovideauthoritativeonly

nameservices.

onMacOSXServer,updatetherootzonestoredin/var/named/

named.ca.

•GivenServerAdminandaDNSzonehostedonaMacOSXServer

computer,addmailexchangerecordstothezone.

MacOSXSecurityandMobility10.6ExamPreparationGuide

•GivenaproperlyformattedDNSconfigurationandaseparate

configurationfileofunknownoriginandcontent,troubleshoota

brokenDNSconfigbycomparingagainstaknown-goodconfig.

•GivenServerAdminandamailexchangerecord,configurethemail

exchangerecord’spriority.

•Withoutreferences,definetherecordtypesintheDNSsystem,

including:

Address（A）,CanonicalName（CNAME）,MailExchanger（MX）,

NameServer（NS）,Pointer（PTR）,Text（TXT）,Service（SRV）,and

HardwareInfo（HINFO）.

•Withoutreferences,explainthedifferencesbetweenafullyqualified

domainname（FQDN）andarelativedomainname.

•Withoutreferences,explainthepurposeofeachofthefollowingtypes

ofrecordsthatcanbeaddedtoaDNSzone:

address,aliasorcanonical

name,mailexchange,andpointer.

•GivenServerAdminandaDNSzonestoredonaMacOSXServer

computer,addanewmachinerecordtotheDNSzone.

computer,addanewaliasrecordtotheDNSzone.

•GivenServerAdminandaMacintoshOSXServercomputer,startand

stopDNSserviceontheserver.

•GiventheLookuppaneinNetworkUtilityandaMacintoshOSXServer

computer,verifythattheDNSserviceontheserveriscorrectly

resolvingdomainnamesandIPaddresses.

•Withoutreferences,listtheaddressfortheofficialBIND

documentation.

•GivenadefaultinstallationofMacOSXServer,describedescribethe

underlyingconfiguration/directoryfilestructureforDNSservices.

•GivenanunconfiguredinstallationofMacOSXServerandanexisting

DNSserverprovidingvalidandaccurateDNSservices,describethe

impactofpre-existingDNSoninitialserversetup.

•Withoutreferences,describethepurposeandbenefitofDNScaching.

•Withoutreferences,describehowDomainNameSystem（DNS）

associatescomputerhostnameswithIPaddressesonanetwork.

•Withoutreferences,describethepurposesofaDNSserver,including

translatingbetweendomainnamesandIPaddresses,andactingasa

cacheandrelayfortranslationsprovidedbyotherDNSservers.

•Withoutreferences,describehowaDNSserverusesahierarchyofDNS

serverstoresolveadomainnamethatisnotstoredlocally.

•Withoutreferences,listthefourstepsnecessarytoconfigureanew

DNSserviceforanorganization,includingregisteringadomainname,

creatingDNSzones,addingDNSrecordstothezones,andstartingthe

DNSservice.

ChapterTwo:

DHCP

UponcompletionofChapterTwo,“ProvidingNetworkServices:

DHCP”,you

shouldbeabletocompletethefollowingtasks.Theeightitemsfromthis

chapterthatappearontheexam,aredrawnrandomlyfromthefollowing

•Withoutreferences,describethesecurityimplicationsofdeployingthe

DHCPserviceonMacOSXServerv10.6,andstrategiestomitigatethe

risksbasedonthoseimplications.

•GivenServerAdmin,displaythelogfilesfortheDHCPservice.

•Withoutreferences,describethefunctionoftheDHCPserviceinMac

OSXServer.

•IdentifytheDHCPlogmessagesthatindicatealeasewasacquired

fromMacOSXServerbyaDHCPclient.

•GiventhelogfilefortheDHCPserviceonaMacOSXServer

computer,identifytheentriesassociatedwithaspecifiedclient

computer.

•Giventheserveradministrationtoolsandsystemlogs,isolateand

resolveDHCPissueswithaDHCPclientorwiththeDHCPserveron

MacOSXServer.

•Withoutreferences,listthe4primarystepsthatoccurwhenaclient

computerrequestsanaddressfromaDHCPserver.

•GivenServerAdmin,configuretheleaseandrenewaltimesforaDHCP

subrangeintheDHCPservice.

•GivenServerAdminconnectedtoaMacOSXServer,configurethe

DNSinformationthatwillbeprovidedtoagivensubrangebythe

DHCPservice.

•GivenServerAdminconnectedtoaMacOSXServer,configuretheIP

addressinginformationthatwillbeprovidedtoagivensubrangeby

theDHCPservice.

•GivenServerAdminconnectedtoaMacOSXServercomputer,specify

overwhichnetworkinterfacestheDHCPservicewillprovideaddresses.

•GivenServerAdmin,displayalistofthecurrentclientcomputersofthe

DHCPserviceonaMacOSXServercomputer.

•GivenServerAdmin,configuretheDHCPservicetoassignaspecificIP

addresstoaspecificcomputerbasedonthecomputer'

shardware

（MAC）address.

•IdentifywhetheranetworkporthasreceivedanIPaddressfroma

DHCPserverorisusingalink-localaddress.

•GivenServerAdmin,configuretheloggingdetaillevelfortheDHCP

service.

ChapterThree:

NAT/Gateway

UponcompletionofChapterThree,“ProvidingNetworkServices:

NAT/

Gateway”,youshouldbeabletocompletethefollowingtasks.Thesixitems

fromthischapterthatappearontheexamaredrawnrandomlyfromthe

followingobjectives:

NATserviceonMacOSXServerv10.6andstrategiestomitigatethe

•Withoutreferences,describehowportforwardingisconfiguredforand

implementedbytheNATserviceonMacOSXServerv10.6.

•Definetheterms“staticNAT”,“dynamicNAT”,and“PortAddress

Translation”.

•GivenServerAdmin,configureMacOSXServertoprovidemultiple

computersonaprivateLANaccesstotheInternetusingasingle

assignedpublicIPaddress.

•DescribehowanoutboundNATconnectionworksonMacOSXv10.6.

•GivenaMacOSXServercomputerconfiguredtoactasagateway

betweentwonetworks,configuretheNATservicetoportforward

incomingIPtraffictocomputersbasedupontheIPportofthe

incomingtraffic.

•Withoutreferences,describetherelationshipbetweenIPportsand

servicesonanIPhost.

•Withoutreferences,definetheterm“portforwarding”asimplemented

inMacOSXServer.

•GivenGatewaySetupAssistantonaMacOSXServercomputer,

configuretheservertogivemultiplecomputersonaprivateLAN

accesstotheInternetusingasingleassignedpublicIPaddress.

•GivenaMacOSXServercomputerconfiguredasagatewayserver,

troubleshootasituationwhereacomputerontheprivatenetworkis

unabletoaccessservicesonthepublicnetwork.

•Givenaproperlyconfiguredprimaryzone,functionalDN