AE-C (NBRC) study plan

Map every local and network directory node type (local, LDAPv3, Active Directory, Open Directory) and write a one-page comparison of authentication and search-path behavior for each

Configure a test macOS client to bind to a local Open Directory or LDAP server, then unbind and document the exact steps and observed logs

Create, modify, disable, and delete local user accounts with dscl and sysadminctl, recording command syntax and side effects for each

Explain how the search policy order affects name resolution and demonstrate a lookup failing due to wrong node order

Configure mobile (network) accounts and cached credentials, then test login with the directory server offline

Build a group, nest it inside another group, and verify inherited permissions and group membership resolution with dseditgroup and id

Set and enforce password policies and account lockout thresholds, then prove the policy blocks a bad-password attempt

Diagnose a failed bind using log stream and odutil, and record the root cause and fix

Configure IPv4 and IPv6 on a test interface via networksetup and System Settings, and confirm with ifconfig and scutil

Set static routes, DNS servers, and search domains, then verify resolution order with scutil --dns and dscacheutil

Configure and test a VPN or 802.1X profile and capture the connection state transitions

Document the difference between the primary and additional network service order and demonstrate failover

Configure SMB and AFP (or NFS) sharing, mount each from a second machine, and record authentication behavior

Set POSIX permissions, ACLs, and inheritance flags on a share, then test access as three different users

Configure a share point with specific protocol and access restrictions and verify restricted users are denied

Diagnose a permission-denied mount using ls -le, log show, and smbutil

Add, share, and remove a printer via lpadmin and CUPS, and inspect the queue with lpstat

Deploy a signed configuration profile that installs a printer and a certificate, then verify both applied

Create a certificate request, issue a certificate from a test CA, and trust it in the System keychain

Inspect keychain items with security commands and explain which keychain an item lands in and why

Configure FileVault, escrow a recovery key, and verify unlock at boot

Set up firmware password or Activation Lock equivalent and document recovery paths

Build a signed, notarized installer package and deploy it to a test Mac

Create an MDM enrollment profile flow and verify a configuration profile pushes and reports compliance

Capture a system snapshot with system_profiler and a sysdiagnose bundle, then extract three useful facts from each

Use log stream predicates and log show to isolate a specific subsystem error

Run first aid on a volume and interpret the output, and check SMART or drive health status

Reproduce a startup or login failure in a VM and document the recovery steps taken

Re-run two labs per high-weight domain from memory without notes and log any step you could not recall

Complete a timed mixed practice set and categorize every miss by domain and root cause

Rewrite your weakest three notes pages into concise reference cards

Verify readiness by scoring at least 80 percent on the mixed set and closing all open review items