Deck 12: Operating System Security

Question 1

Performing regular backups of data on a system is a critical control
that assists with maintaining the integrity of the system and user data.

Answer 1

True

Question 2

A malicious driver can potentially bypass many security controls to
install malware.

Answer 2

True

Question 3

Lower layer security does not impact upper layers.

Answer 3

False

Question 4

Most large software systems do not have security weaknesses.

Question 5

The default configuration for many operating systems usually
maximizes security.

Question 6

You should run automatic updates on change-controlled systems.

Question 7

Ideally new systems should be constructed on an unprotected network
in order to prevent installation restrictions.

Question 8

The first step in deploying new systems is _________.

A)security testing
B)installing patches
C)planning
D)secure critical content

Question 9

__________ applications is a control that limits the programs that can execute on the system to just those in an explicit list.

A)Virtualizing
B)White listing
C)Logging
D)Patching

Question 10

The purpose of the system does not need to be taken into consideration
during the system security planning process.

Question 11

Each layer of code needs appropriate hardening measures in place to
provide appropriate security services.

Question 12

The following steps should be used to secure an operating system:

A)test the security of the basic operating system
B)remove unnecessary services
C)install and patch the operating system
D)all of the above

Question 13

Manual analysis of logs is a reliable means of detecting adverse
events.

Question 14

It is possible for a system to be compromised during the installation
process.

Question 15

Passwords installed by default are secure and do not need to be
changed.

Question 16

A plan needs to identify appropriate personnel to install and manage
the system,noting any training needed.

Question 17

The first critical step in securing a system is to secure the __________.

A)base operating system
B)system administrator
C)malware protection mechanisms
D)remote access privileges

Question 18

Backup and archive processes are often linked and managed together.

Question 19

Which of the following need to be taken into consideration during the system security planning process?

A)how users are authenticated
B)the categories of users of the system
C)what access the system has to information stored on other hosts
D)all of the above

Question 20

A very common configuration fault seen with Web and file transfer
servers is for all the files supplied by the service to be owned by the
same "user" account that the server executes as.

Question 21

The range of logging data acquired should be determined _______.

A)during security testing
B)as a final step
C)after monitoring average data flow volume
D)during the system planning stage

Question 22

______ systems should not run automatic updates because they may possibly introduce instability.

A)Configuration controlled
B)Policy controlled
C)Change controlled
D)Process controlled

Question 23

______ is the process of retaining copies of data over extended periods of time,being months or years,in order to meet legal and operational requirements to access past data.

Question 24

The needs and policy relating to backup and archive should be determined ______.

A)as a final step
B)during the system planning stage
C)during security testing
D)after recording average data flow volume

Question 25

The three operating system security layers are: physical hardware,operating system kernel,and _________.

Question 26

The aim of the specific system installation planning process is to maximize _______ while minimizing costs.

Question 27

The most important changes needed to improve system security are to ______.

A)disable remotely accessible services that are not required
B)ensure that applications and services that are needed are appropriately configured
C)disable services and applications that are not required
D)all of the above

Question 28

The final step in the process of initially securing the base operating system is ________.

Question 29

_______ is the process of making copies of data at regular intervals allowing the recovery of lost or corrupted data over relatively short time periods of a few hours to some weeks.

Question 30

Cryptographic file systems are another use of _______.

A)encryption
B)testing
C)virtualizing
D)acceleration

Question 31

______ is a reactive control that can only inform you about bad things that have already happened.

Question 32

System security begins with the installation of the ________.

Question 33

Unix and Linux systems grant access permissions for each resource using the ______ command.

Question 34

______ are resources that should be used as part of the system security planning process.

A)Texts
B)Online resources
C)Specific system hardening guides
D)All of the above

Question 35

Once the system is appropriately built,secured,and deployed,the process of maintaining security is ________.

A)complete
B)no longer a concern
C)continuous
D)sporadic

Question 36

The ______ process makes copies of data at regular intervals for recovery of lost or corrupted data over short time periods.

A)logging
B)backup
C)hardening
D)archive

Question 37

Security concerns that result from the use of virtualized systems include ______.

A)guest OS isolation
B)guest OS monitoring by the hypervisor
C)virtualized environment security
D)all of the above

Question 38

Unix and Linux systems use a ________ which restricts the server's view of the file system to just a specified portion.

Question 39

_______ systems should validate all patches on test systems before deploying them to production systems.

Question 40

The ______ process retains copies of data over extended periods of time in order to meet legal and operational requirements.

A)archive
B)virtualization
C)patching
D)backup

Question 41

Guest OSs are managed by a ______,or VMM,that coordinates access between each of the guests and the actual physical hardware resources.

Question 42

______ virtualization systems are more common in clients,where they run along side other applications on the host OS,and are used to support applications for alternate operating system versions or types.

Question 43

Configuration information in Windows systems is centralized in the _______,which forms a database of keys and values.

Question 44

________ refers to a technology that provides an abstraction of the computing resources that run in a simulated environment.

Question 45

______ virtualization systems are typically seen in servers,with the goal of improving the execution efficiency of the hardware.