OS Hardening: Windows and Linux

Podcast

Play an AI-generated podcast conversation about this lesson

Download our mobile app to listen on the go

Get App

Questions and Answers

Which principle is LEAST directly addressed when focusing on system integrity checks during OS hardening?

Integrity, verifying data remains unaltered and trustworthy.
Authentication, confirming the identity of users or processes.
Availability, ensuring systems remain operational.
Confidentiality, protecting sensitive information from unauthorized access. (correct)

What is the MOST critical difference between discretionary access control (DAC) and mandatory access control (MAC) systems like SELinux or AppArmor?

DAC allows users to set permissions on objects they own, providing flexibility but potential security risks, whereas MAC enforces centrally-defined policies, limiting user discretion but enhancing security. (correct)
DAC uses security labels for access control decisions, while MAC relies on Access Control Lists (ACLs).
DAC is centrally managed, while MAC is distributed.
DAC is focused on preventing privilege escalation, while MAC is designed to ensure data confidentiality.

How does kernel hardening contribute to the overall security posture of a Linux system?

By automatically backing up system files to prevent data loss.
By encrypting network traffic to protect against eavesdropping.
By implementing stricter password policies for user accounts.
By reducing the kernel's attack surface and preventing exploitation of kernel vulnerabilities. (correct)

What is the MOST significant implication of failing to regularly update the patch management in Windows systems?

Increased risk of security vulnerabilities being exploited by attackers. (C) Signup and view all the answers

Consider a scenario where an organization needs to ensure secure remote access to its Linux servers. Which of the following configurations would provide the MOST robust security against unauthorized access?

Disabling password-based authentication and using only single-factor key-based SSH access; regularly rotate SSH keys. (A) Signup and view all the answers

An administrator configures SELinux in targeted mode. What is the expected behavior of SELinux in this configuration?

SELinux enforces security policies only on specific processes or types of processes. (B) Signup and view all the answers

Which of the following is the MOST effective method to protect sensitive data stored on a laptop in case of theft or loss?

Enabling full disk encryption with a strong passphrase. (A) Signup and view all the answers

Consider a scenario where a web server is serving sensitive data over HTTPS, and an attacker exploits a vulnerability to perform a man-in-the-middle attack. What is the MOST effective countermeasure to prevent the attacker from intercepting and decrypting the traffic?

Enforcing the use of strong TLS cipher suites and regularly updating the server's SSL/TLS certificate. (D) Signup and view all the answers

An organization wants to implement a security measure to detect unauthorized changes to critical system files on its Linux servers. Which technique meets this objective most effectively?

Implementing a host-based intrusion detection system (HIDS) with file integrity monitoring capabilities. (A) Signup and view all the answers

Which of the following techniques is MOST effective in mitigating the risk of privilege escalation attacks on a Windows server?

Implementing the principle of least privilege and regularly auditing user accounts and group memberships. (D) Signup and view all the answers

What is the PRIMARY purpose of using a security baseline in OS hardening?

To establish a minimum security standard and a consistent security configuration across multiple systems. (A) Signup and view all the answers

Which of the following is the MOST important consideration when configuring Windows Firewall on a server?

Allowing only necessary inbound connections required for specific services and applications. (B) Signup and view all the answers

An organization is implementing file system encryption on its Linux servers using LUKS. What is the MOST critical step to take after setting up LUKS?

Backing up the LUKS header and encryption key to a secure, offsite location. (B) Signup and view all the answers

Which of the following is the MOST effective method to prevent brute-force attacks against SSH on a Linux server?

Disabling password authentication and using only key-based authentication. (A) Signup and view all the answers

An administrator discovers an unauthorized process running with elevated privileges on a Windows server. Which of the following actions should the administrator take FIRST?

Identify the process, investigate its origin, and determine the scope of the compromise. (C) Signup and view all the answers

How does the principle of least privilege contribute to OS hardening?

By limiting user access to only the resources and privileges necessary for their job functions. (C) Signup and view all the answers

An organization wants to implement a solution to prevent unauthorized software from running on its Windows systems. Which of the following technologies would be the MOST effective in achieving this goal?

AppLocker or Windows Defender Application Control (WDAC). (B) Signup and view all the answers

What is the PRIMARY benefit of using a jump server (also known as a bastion host) in a hardened network architecture?

To provide a single point of entry for accessing internal resources, limiting the attack surface. (D) Signup and view all the answers

Which of the following is the MOST effective defense against SQL injection attacks on a web server?

Implementing input validation and parameterized queries. (B) Signup and view all the answers

Why is disabling unnecessary services important for OS hardening?

It reduces the attack surface by minimizing potential entry points for attackers. (B) Signup and view all the answers

How does UEFI Secure Boot contribute to OS hardening?

By preventing the execution of unauthorized operating systems and bootloaders. (D) Signup and view all the answers

An organization is concerned about the security of its Windows Server environment. What is the PRIMARY purpose of using the Microsoft Security Compliance Toolkit (SCT)?

To create, customize, and deploy security baselines for Windows Server. (A) Signup and view all the answers

What is the MOST important consideration when implementing logging and auditing on a hardened system?

Regularly reviewing logs for suspicious activity and securely storing logs to prevent tampering. (A) Signup and view all the answers

What is the PRIMARY advantage of using a configuration management tool like Ansible, Chef, or Puppet for OS hardening?

To automate the process of configuring and maintaining consistent security settings across multiple systems. (A) Signup and view all the answers

An organization is implementing a security policy that requires all data at rest to be encrypted. Which of the following technologies would be MOST suitable for encrypting the entire file system on a Windows server?

BitLocker. (D) Signup and view all the answers

How does Address Space Layout Randomization (ASLR) contribute to OS hardening?

By randomizing the memory addresses used by programs, making it more difficult for attackers to exploit memory corruption vulnerabilities. (C) Signup and view all the answers

An organization wants to implement a security measure to prevent users from installing unauthorized applications on their Windows workstations. Which of the following would MOST effectively achieve this goal?

Using Group Policy to restrict software installation and execution. (A) Signup and view all the answers

Consider an environment where network segmentation is used as a security strategy. How does this contribute to OS hardening?

By isolating critical systems and limiting the impact of security breaches. (A) Signup and view all the answers

What is the PRIMARY reason for using a centralized log management system in a hardened environment?

To facilitate the analysis of security events and detect anomalies across multiple systems. (D) Signup and view all the answers

An organization wants to ensure the integrity of its Linux kernel. Which technique would be MOST appropriate for verifying that the kernel has not been tampered with?

Using a tool like AIDE (Advanced Intrusion Detection Environment) to perform file integrity monitoring. (D) Signup and view all the answers

What is a PRIMARY benefit of using immutable infrastructure in a hardened environment?

It reduces the attack surface by preventing unauthorized modifications to systems. (A) Signup and view all the answers

Which of the following is the MOST effective method to prevent cross-site scripting (XSS) attacks on a web application?

Implementing input validation and output encoding. (D) Signup and view all the answers

An organization is implementing a BYOD (Bring Your Own Device) program. Which of the following security measures would be MOST important to protect the organization's data?

Implementing Mobile Device Management (MDM) to enforce security policies and remotely wipe devices. (A) Signup and view all the answers

How does disabling or limiting the use of legacy protocols (e.g., SSLv3, TLS 1.0) contribute to OS hardening and improved security?

It mitigates the risk of exploitation of known vulnerabilities in those protocols. (A) Signup and view all the answers

In the context of hardening a web server, what is the PRIMARY purpose of using a Web Application Firewall (WAF)?

To filter out malicious traffic and prevent common web application attacks. (B) Signup and view all the answers

What is the MOST important consideration when implementing two-factor authentication (2FA) on a system?

Ensuring that the second factor is independent of the primary authentication factor and securely managed. (B) Signup and view all the answers

How does OS security hardening, focusing on CIA (Confidentiality, Integrity, Availability), affect an organization’s overall risk management strategy?

It serves as a foundational element by minimizing the likelihood and impact of cyber threats, thus reducing overall risk exposure. (C) Signup and view all the answers

Signup and view all the answers

Flashcards

OS Hardening

The process of securing an operating system to reduce vulnerabilities and protect against threats.

Confidentiality

Protecting information from unauthorized access.