Deck 12: Operating System Security

Question 1

It is possible for a system to be compromised during the installation
process.

Answer 1

True

Question 2

Backup and archive processes are often linked and managed together.

Answer 2

True

Question 3

The purpose of the system does not need to be taken into consideration
during the system security planning process.

Answer 3

False

Question 4

The first step in deploying new systems is _________.

A)security testing
B)installing patches
C)planning
D)secure critical content

Question 5

Manual analysis of logs is a reliable means of detecting adverse
events.

Question 6

The first critical step in securing a system is to secure the __________.

A)base operating system
B)system administrator
C)malware protection mechanisms
D)remote access privileges

Question 7

You should run automatic updates on change-controlled systems.

Question 8

Lower layer security does not impact upper layers.

Question 9

A plan needs to identify appropriate personnel to install and manage
the system,noting any training needed.

Question 10

__________ applications is a control that limits the programs that can execute on the system to just those in an explicit list.

A)Virtualizing
B)White listing
C)Logging
D)Patching

Question 11

Most large software systems do not have security weaknesses.

Question 12

The following steps should be used to secure an operating system:

A)test the security of the basic operating system
B)remove unnecessary services
C)install and patch the operating system
D)all of the above

Question 13

Each layer of code needs appropriate hardening measures in place to
provide appropriate security services.

Question 14

A very common configuration fault seen with Web and file transfer
servers is for all the files supplied by the service to be owned by the
same "user" account that the server executes as.

Question 15

Ideally new systems should be constructed on an unprotected network
in order to prevent installation restrictions.

Question 16

Passwords installed by default are secure and do not need to be
changed.

Question 17

Which of the following need to be taken into consideration during the system security planning process?

A)how users are authenticated
B)the categories of users of the system
C)what access the system has to information stored on other hosts
D)all of the above

Question 18

The default configuration for many operating systems usually
maximizes security.

Question 19

Performing regular backups of data on a system is a critical control
that assists with maintaining the integrity of the system and user data.

Question 20

A malicious driver can potentially bypass many security controls to
install malware.

Question 21

Cryptographic file systems are another use of _______.

A)encryption
B)testing
C)virtualizing
D)acceleration

Question 22

Unix and Linux systems use a ________ which restricts the server's view of the file system to just a specified portion.

Question 23

______ systems should not run automatic updates because they may possibly introduce instability.

A)Configuration controlled
B)Policy controlled
C)Change controlled
D)Process controlled

Question 24

_______ systems should validate all patches on test systems before deploying them to production systems.

Question 25

The range of logging data acquired should be determined _______.

A)during security testing
B)as a final step
C)after monitoring average data flow volume
D)during the system planning stage

Question 26

______ is the process of retaining copies of data over extended periods of time,being months or years,in order to meet legal and operational requirements to access past data.

Question 27

The final step in the process of initially securing the base operating system is ________.

Question 28

The most important changes needed to improve system security are to ______.

A)disable remotely accessible services that are not required
B)ensure that applications and services that are needed are appropriately configured
C)disable services and applications that are not required
D)all of the above

Question 29

The three operating system security layers are: physical hardware,operating system kernel,and _________.

Question 30

______ is a reactive control that can only inform you about bad things that have already happened.

Question 31

Security concerns that result from the use of virtualized systems include ______.

A)guest OS isolation
B)guest OS monitoring by the hypervisor
C)virtualized environment security
D)all of the above

Question 32

_______ is the process of making copies of data at regular intervals allowing the recovery of lost or corrupted data over relatively short time periods of a few hours to some weeks.

Question 33

The aim of the specific system installation planning process is to maximize _______ while minimizing costs.

Question 34

The ______ process makes copies of data at regular intervals for recovery of lost or corrupted data over short time periods.

A)logging
B)backup
C)hardening
D)archive

Question 35

______ are resources that should be used as part of the system security planning process.

A)Texts
B)Online resources
C)Specific system hardening guides
D)All of the above

Question 36

Unix and Linux systems grant access permissions for each resource using the ______ command.

Question 37

System security begins with the installation of the ________.

Question 38

The needs and policy relating to backup and archive should be determined ______.

A)as a final step
B)during the system planning stage
C)during security testing
D)after recording average data flow volume

Question 39

Once the system is appropriately built,secured,and deployed,the process of maintaining security is ________.

A)complete
B)no longer a concern
C)continuous
D)sporadic

Question 40

The ______ process retains copies of data over extended periods of time in order to meet legal and operational requirements.

A)archive
B)virtualization
C)patching
D)backup

Question 41

______ virtualization systems are typically seen in servers,with the goal of improving the execution efficiency of the hardware.

Question 42

______ virtualization systems are more common in clients,where they run along side other applications on the host OS,and are used to support applications for alternate operating system versions or types.

Question 43

Guest OSs are managed by a ______,or VMM,that coordinates access between each of the guests and the actual physical hardware resources.

Question 44

Configuration information in Windows systems is centralized in the _______,which forms a database of keys and values.

Question 45

________ refers to a technology that provides an abstraction of the computing resources that run in a simulated environment.