Operating Systems Security
Midterm Exam
Course Introduction
Operating Systems Security delves into the principles and practices for securing modern operating systems. Students will explore common security threats, vulnerabilities, and attacks targeting operating systems, along with strategies for risk mitigation and incident response. Topics include access control models, authentication and authorization mechanisms, secure software design, privilege management, security policies, system hardening, patch management, and monitoring for malicious activity. Emphasis is placed on both theoretical foundations and practical techniques, preparing students to analyze system-level threats and apply effective security measures in real-world computing environments.
Recommended Textbook Guide to Firewalls and VPNs 3rd Edition by
Michael E. Whitman
Available Study Resources on Quizplus
10 Chapters
496 Verified Questions
496 Flashcards
Source URL: https://quizplus.com/study-set/2181
Page 2
Chapter 1: Introduction to Information Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43454
Sample Questions
Q1) An individual who hacks the public telephone network to make free calls or disrupt services is called a ____.
A) phreaker
B) hactivist
C) packet monkey
D) cyberterrorist
Answer: A
Q2) In a ____ attack, the attacker sends a large number of connection or information requests to a target in an attempt to overwhelm its capacity and make it unavailable for legitimate users.
A) man-in-the-middle
B) sniffer
C) dictionary
D) denial-of-service (DoS)
Answer: D
Q3) In a(n) ____________________ attack, the attacker monitors (or sniffs) packets from the network, modifies them using Internet Protocol spoofing techniques, and then inserts them back into the network.
Answer: man-in-the-middle
To view all questions and flashcards with answers, click on the resource link above.
Page 3
Chapter 2: Security Policies and Standards
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43455
Sample Questions
Q1) How does an EISP address an organization's need to comply with laws and regulations?
Answer: 1.General compliance by ensuring the organization establishes suitable programs and assigns responsibilities to identified organizational units
2.Identification of specific penalties and disciplinary actions for deviations from policy
Q2) Within a SETA program, ____ is only available to some of the organization's employees.
A) security-related trinkets
B) security education
C) security training
D) security awareness programs
Answer: B
Q3) ____________________ management differs dramatically from incident response, as it focuses first and foremost on the people involved.
Answer: Crisis
To view all questions and flashcards with answers, click on the resource link above.
4
Chapter 3: Authenticating Users
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43456
Sample Questions
Q1) Obtaining the identity of the entity requesting access to a logical or physical area.
A)authentication
B)least privilege
C)discretionary access controls
D)authorization
E)separation of duties
F)identification
G)need to know
H)nondiscretionary access controls
I)accountability
Answer: F
Q2) ____ access controls remedy a circumstance or mitigate the damage caused during an incident.
A) Corrective
B) Detective
C) Deterrent
D) Preventive
Answer: A
To view all questions and flashcards with answers, click on the resource link above.
Page 5
Chapter 4: Introduction to Firewalls
Available Study Resources on Quizplus for this Chatper
49 Verified Questions
49 Flashcards
Source URL: https://quizplus.com/quiz/43457
Sample Questions
Q1) Mobile devices such as laptops, PDAs, and smartphones blur the perimeter boundary.
A)True
B)False
Q2) A ____ contains the source's IP and port as well as the destination's IP and port, and it also provides information on the total time in seconds, the time remaining in seconds, and the protocol used (UDP or TCP).
A) state table
B) packet header
C) datagram
D) TCP table
Q3) In the OSI model, level 1 is the ____ layer.
A) physical
B) data link
C) transport
D) application
Q4) The OSI networking model has ____________________ layers.
Q5) How do firewalls help document what happens on a network?
Q6) "____________________" refers to the era of technology a firewall evolved in.
To view all questions and flashcards with answers, click on the resource link above. Page 6
Q7) What are some of the advanced security functions provided by modern firewalls?
Chapter 5: Packet Filtering
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43458
Sample Questions
Q1) The problem with fragmentation is that because the TCP or UDP port number is provided only at the beginning of a packet, it appears ____.
A) only in fragments numbered 0
B) only in fragments numbered above 0
C) in all fragments
D) in no fragments
Q2) Telnet is most often assigned to use port ____.
A) 20
B) 21
C) 23
D) 80
Q3) Packets requesting a connection have the ACK bit set to 0; those that are part of an ongoing connection have the ACK bit set to ____.
A) -1
B) 0
C) 1
D) 99
Q4) How should a firewall process fragmentation flags?
Q5) What are ICMP packets?
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Firewall Configuration and Administration
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43459
Sample Questions
Q1) Of central importance to the operation of the firewall software that it hosts.
A)boot-up password
B)firewall rules
C)bastion host
D)screen saver password
E)restrictive
F)IP forwarding
G)permissive
H)supervisor password
I)caching
Q2) If the primary goal of a firewall is to block unauthorized access, the emphasis needs to be on restricting rather than enabling connectivity
A)True
B)False
Q3) Describe the Content Vectoring Protocol (CVP).
Q4) What is a screen saver password? Why is it important?
Q5) Any firewall hardware can support a proxy server.
A)True
B)False
Q6) Describe the importance of the bastion host's performance.
Page 8
To view all questions and flashcards with answers, click on the resource link above.
Chapter 7: Working With Proxy Servers and
Application-Level Firewalls
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43460
Sample Questions
Q1) How do proxy servers differ from packet filters?
Q2) How can a proxy server be used for e-mail protection?
Q3) ____ is a method of using multiple systems to take turns handling requests, to prevent any one system from getting overloaded.
A) Network load balancing (NLB)
B) Network proxying (NP)
C) Buffer overflow
D) Screen subnets
Q4) A disk ____ is a predefined temporary data storage location.
A) buffer
B) log
C) cache
D) filter
Q5) As the number of users on the network grows, the machine that hosts the proxy server should be upgraded.
A)True
B)False
Q6) What is the most important benefit of a proxy server?
Page 9
Q7) How can proxy servers affect performance of the network?
Q8) How do reverse proxy servers work?
To view all questions and flashcards with answers, click on the resource link above.
Page 10
Chapter 8: Implementing the Bastion Host
Available Study Resources on Quizplus for this Chatper
49 Verified Questions
49 Flashcards
Source URL: https://quizplus.com/quiz/43461
Sample Questions
Q1) On a Windows bastion host, consider creating two ____________________: one for the operating system and one for the Web server, DNS server, or other software you plan to run on the host.
Q2) In general, where should bastion hosts be located on the network?
A) within the internal LAN
B) DMZ
C) before the router
D) between the router and firewall
Q3) Standard for logging program message.
A)instruction cache
B)log files
C)translation lookaside buffer
D)data cache
E)Demilitarized Zone
F)bastion host
G)UNIX
H)processor speed
I)syslog daemon
Q4) Discuss the pros and cons of having more than one bastion host.
Q5) Why is it a good idea to disable user accounts on the bastion host?
11
To view all questions and flashcards with answers, click on the resource link above.
Chapter 9: Encryption - The Foundation for the Virtual
Private
Network
Available Study Resources on Quizplus for this Chatper
48 Verified Questions
48 Flashcards
Source URL: https://quizplus.com/quiz/43462
Sample Questions
Q1) The encrypted or encoded message resulting from an encryption.
A)cipher
B)keyspace
C)encipher
D)cryptosystem
E)ciphertext
F)work factor
G)decipher
H)algorithm
I)cryptovariable
Q2) ____ attacks can be successful when the ciphertext consists of relatively few characters.
A) Correlation
B) Man-in-the-middle
C) Dictionary
D) Timing
Q3) What is a Vernam cipher?
Q4) What are three commonly used functions used by encryption algorithms?
Q5) Define encryption.
Q6) What are common implementations of PKI? Page 12
To view all questions and flashcards with answers, click on the resource link above. Page 13
Chapter 10: Setting up a Virtual Private Network
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43463
Sample Questions
Q1) Most VPN concentrator appliances give users the choice of operating in one of two modes: ____________________ mode or network extension mode.
Q2) A(n) ____ is essential for identifying who can use the VPN and for ensuring that all users know what constitutes proper use of the VPN.
A) VPN client
B) encrypted authentication
C) VPN policy
D) digital signature
Q3) Services purchased from a service provider that give the user dedicated use of a predefined bandwidth or data rate.
A)encapsulation
B)tunnel
C)client-to-site
D)transport mode
E)gateway
F)private leased lines
G)tunnel mode
H)site-to-site
I)Point-to-Point Tunneling Protocol
To view all questions and flashcards with answers, click on the resource link above.
Page 14