Operating System Security Exam Questions AND Correct
Answers
___________ is a generic term for all malicious software. -
✔✔The correct answer is malware.
(1) During the dormant phase the virus is idle. The virus will
remain in this state, without releasing its payload, until some
triggering event occurs. This triggering event may be a user
action, such as opening a specific file, or it may be something
more passive such as a specific date or time. This phase is
optional, meaning that not every virus has a dormant phase.
(2) During the propagation phase the virus spreads, typically
seizing every opportunity to replicate itself to other systems.
It should be noted that the virus has not yet executed its
payload during the propagation phase. If the virus is file-
infecting, then it will infect other executable files on the
system. If the virus is spread through email then typically it
will mail copies of itself to other email addresses found on the
system.
(3) If the virus has been dormant, the triggering phase is the
phase that causes it to activate. As previously outl -
✔✔Viruses Phases
,•Check permissions on every access - the operating system
needs to verify a user's permissions every time they access an
object. If this is not done then users may continue to have
access even after their permissions have changed. On the flip
side, users may not have access to assets even after an
administrator has adjusted their permission settings.
•Enforce least privilege - Recall that the principle of least
privileges states that users should have access only to the
assets they need to accomplish their assigned tasks.
•Ensure acceptable usage - While determining whether a
person can have access is a yes or no decision, an access
control system should attempt to ensure that the object is
being used appropriately. This type of defense can help
defend against some types of viruses that cause existing
programs to behave in new manners. - ✔✔Goals of an Access
Control System
•CPU utilization.
•Memory utilization.
•Which processes are running at a particular time.
,•Some advanced monitor what each process typically does,
and sound an alarm when a process exhibits abnormal
behavior. - ✔✔Host based IDSs run on a computer like anti-
virus products and monitor the computer for unusual activity.
Host based IDSs are heuristically based software systems that
compare how the system is currently running to observed
prior behavior. Host based IDSs monitor all of the following:
•Unclassified
•Restricted
•FOUOF - or Official Use Only
•CUI - Controlled Unclassified Information
•SBU - Sensitive but Unclassified
•Confidential
, •Secret
•Top Secret - ✔✔Though the policy attempts to satisfy all
goals of information assurance, confidentiality is a top
priority.
Generally speaking, information in the DoD security policy is
governed by the concept of "need to know". The DoD security
policy classifies information according to its sensitivity.
•Where should it be stored?
•How should it be secured?
•When should the OS be allowed to access the key?
•When should the OS be denied access? - ✔✔The use of
encryption prevents attackers from being able to discern the
individual passwords. Though this approach seems
straightforward and clean, it is not quite the case.
The main challenges involve the encryption key:
Answers
___________ is a generic term for all malicious software. -
✔✔The correct answer is malware.
(1) During the dormant phase the virus is idle. The virus will
remain in this state, without releasing its payload, until some
triggering event occurs. This triggering event may be a user
action, such as opening a specific file, or it may be something
more passive such as a specific date or time. This phase is
optional, meaning that not every virus has a dormant phase.
(2) During the propagation phase the virus spreads, typically
seizing every opportunity to replicate itself to other systems.
It should be noted that the virus has not yet executed its
payload during the propagation phase. If the virus is file-
infecting, then it will infect other executable files on the
system. If the virus is spread through email then typically it
will mail copies of itself to other email addresses found on the
system.
(3) If the virus has been dormant, the triggering phase is the
phase that causes it to activate. As previously outl -
✔✔Viruses Phases
,•Check permissions on every access - the operating system
needs to verify a user's permissions every time they access an
object. If this is not done then users may continue to have
access even after their permissions have changed. On the flip
side, users may not have access to assets even after an
administrator has adjusted their permission settings.
•Enforce least privilege - Recall that the principle of least
privileges states that users should have access only to the
assets they need to accomplish their assigned tasks.
•Ensure acceptable usage - While determining whether a
person can have access is a yes or no decision, an access
control system should attempt to ensure that the object is
being used appropriately. This type of defense can help
defend against some types of viruses that cause existing
programs to behave in new manners. - ✔✔Goals of an Access
Control System
•CPU utilization.
•Memory utilization.
•Which processes are running at a particular time.
,•Some advanced monitor what each process typically does,
and sound an alarm when a process exhibits abnormal
behavior. - ✔✔Host based IDSs run on a computer like anti-
virus products and monitor the computer for unusual activity.
Host based IDSs are heuristically based software systems that
compare how the system is currently running to observed
prior behavior. Host based IDSs monitor all of the following:
•Unclassified
•Restricted
•FOUOF - or Official Use Only
•CUI - Controlled Unclassified Information
•SBU - Sensitive but Unclassified
•Confidential
, •Secret
•Top Secret - ✔✔Though the policy attempts to satisfy all
goals of information assurance, confidentiality is a top
priority.
Generally speaking, information in the DoD security policy is
governed by the concept of "need to know". The DoD security
policy classifies information according to its sensitivity.
•Where should it be stored?
•How should it be secured?
•When should the OS be allowed to access the key?
•When should the OS be denied access? - ✔✔The use of
encryption prevents attackers from being able to discern the
individual passwords. Though this approach seems
straightforward and clean, it is not quite the case.
The main challenges involve the encryption key:
