Operating System Security Principles

Match the ASD top four measures for prevention with their descriptions:

White-list approved applications = Restrict admin privileges Patch third-party applications and OS vulnerabilities = Restrict admin privileges Restrict admin privileges to users who need them = Limit access to authorized personnel Create a defense-in-depth system = Implement multiple layers of security

Match the steps in system deployment planning with their descriptions:

Assess risks and plan the system deployment = Plan and identify security requirements Secure the underlying operating system and then the key applications = Implement security configurations for OS and apps Ensure any critical content is secured and Ensure appropriate network protection mechanisms are used = Protect data and network resources Ensure appropriate processes are used to maintain security = Ongoing security monitoring and updates

Match the system security planning steps with their objectives:

Plan needs to identify appropriate personnel and training = Determine security requirements Planning process needs to determine security requirements = Maximize security while minimizing costs Aim: maximize security while minimizing costs = Optimize resource allocation Determine security requirements for the system, applications, data, and users = Identify potential vulnerabilities

Match the security configurations with their goals:

Default configurations for many operating systems = Maximize ease of use and functionality Security configurations differ based on the security needs of each organization = Customized security for each organization Devices is enabled, servers is enable = Enable necessary services and features Secure the base OS = Protect the underlying operating system Signup and view all the answers

Match the system deployment steps with their priorities:

Plan the system deployment = Pre-deployment planning Secure the underlying operating system and then the key applications = Secure OS and apps Ensure any critical content is secured and Ensure appropriate network protection mechanisms are used = Protect data and network resources Ensure appropriate processes are used to maintain security = Ongoing security maintenance Signup and view all the answers

Match the system security planning goals with their descriptions:

Maximize security while minimizing costs = Optimize resource allocation Identify potential vulnerabilities = Detect and mitigate risks Determine security requirements for the system, applications, data, and users = Assess system security needs Plan needs to identify appropriate personnel and training = Develop a skilled security team Signup and view all the answers

Match each virtualization type with its description:

Full virtualization = allows multiple full operating system instances to execute on virtual hardware Virtualization = refers to a technology that provides an abstraction of the computing resources used by some software Hypervisor = manages access to the actual physical hardware resources Virtual Machine (VM) = a simulated environment for software to run in Signup and view all the answers

Match each security maintenance step with its description:

Monitoring and analyzing logging information = identifying potential security breaches Performing regular backups = recovering from security compromises Regularly testing system security = identifying vulnerabilities Using appropriate software maintenance processes = patching and updating critical software Signup and view all the answers

Match each system deployment planning step with its description:

Installing only required software = reducing the number of places vulnerabilities may be found Patching software to the most recent supported secure version = ensuring the system is up-to-date Configuring the system for desired functionality = meeting the system's requirements Monitoring system security = identifying and responding to security incidents Signup and view all the answers

Match each term with its definition:

Vulnerability = a weakness in the system that can be exploited Security compromise = a successful attack on the system Patching = applying updates to fix vulnerabilities Security maintenance = the ongoing process of maintaining system security Signup and view all the answers

Match each concept with its description:

Virtualization security = raises additional security concerns System deployment planning = involves installing only required software Security maintenance = includes monitoring and analyzing logging information Application security = focuses on securing individual applications Signup and view all the answers

Match each term with its description:

Virtualization = provides support for multiple distinct operating systems on one physical system Hypervisor = manages access to the actual physical hardware resources Virtual Machine (VM) = a simulated environment for software to run in Full virtualization = allows multiple full operating system instances to execute on virtual hardware Signup and view all the answers

Match the following security hardening steps with their corresponding descriptions:

Install setup and patch the operating system = Ensure the system is up to date with critical security patches Remove unnecessary services, applications, and protocols = Reduce attack surface Configure users, groups, and permissions = Set minimum permissions to operate correctly Configure resource controls = Set permissions on data and resources Signup and view all the answers

Match the following security measures with their purposes:

Anti-virus = Prevent intrusion detection Host-based firewalls = Block unauthorized access to the system Intrusion Detection System (IDS) = Detect potential security threats Intrusion Prevention System (IPS) = Prevent known vulnerabilities Signup and view all the answers

Match the following system deployment planning steps with their corresponding phases:

Identify system requirements = Planning phase Secure the base OS = Second step Secure apps and services = Third step Test system security = Second step Signup and view all the answers

Match the following benefits with their corresponding security hardening steps:

Reduce attack surface = Remove unnecessary services, applications, and protocols Ensure system is up to date = Install setup and patch the operating system Set minimum permissions = Configure users, groups, and permissions Set permissions on data and resources = Configure resource controls Signup and view all the answers

Match the following security tools with their purposes:

Checklists = Review system security configurations Security hardening guides = Provide recommended security changes Programs for reviewing system security = Check for known vulnerabilities Test scripts = Ensure system meets basic security requirements Signup and view all the answers

Match the following system deployment planning steps with their descriptions:

Secure the base OS = Secure the operating system before adding services and applications Secure apps and services = Install and configure required services and applications Test system security = Ensure system meets basic security requirements Plan system deployment = Identify system requirements and plan accordingly Signup and view all the answers