Question 1

Explain the BIOS-level rootkit SubVirt that was co-developed by Microsoft and the University of Michigan?

Accepted Answer

For demonstration purposes,SubVirt was d

Question 2

Why is it critical to protect SCADA systems from all types of unauthorized attacks?

Accepted Answer

Supervisory control and data acquisition

Question 3

Match each item with a statement below.
-In 2007 became Windows new standard to deploy and manage servers alongside updated patch-management functionality

Accepted Answer

A) attack surface 
B) Windows Software Update Services 
C) Systems Management Server 
D) Server Message Block 
E) NetBEUI
F)Mandatory Access Control
G)Common Internet File System
H)System Center Configuration Manager
I)Remote Procedure Call
J)Samba 
A) attack surface 
B) Windows Software Update Services 
C) Systems Management Server 
D) Server Message Block 
E) NetBEUI
F)Mandatory Access Control
G)Common Internet File System
H)System Center Configuration Manager
I)Remote Procedure Call
J)Samba

Question 4

What should a password policy include?

Accepted Answer

A comprehensive password policy is criti

Question 5

Match each item with a statement below.
-Any computer system that is not a general-purpose PC or server

Accepted Answer

A) Trusted Platform Module 
B) MILS 
C) RTLinux 
D) RTOS 
E) RTEMS
F)embedded system
G)firmware
H)multifunction devices
I)SCADA
J)embedded operating system 
A) Trusted Platform Module 
B) MILS 
C) RTLinux 
D) RTOS 
E) RTEMS
F)embedded system
G)firmware
H)multifunction devices
I)SCADA
J)embedded operating system

Question 6

SCADA systems controlling critical infrastructure are usually completely separated from the Internet by which of the following?

Accepted Answer

A)  firewall 
B)  air gap 
C)  router 
D)  Vlan 
A)  firewall 
B)  air gap 
C)  router 
D)  Vlan

Question 7

Match each item with a statement below.
-A specialized embedded OS used in devices such as programmable thermostats,appliance controls,and even spacecraft

Accepted Answer

A) Trusted Platform Module 
B) MILS 
C) RTLinux 
D) RTOS 
E) RTEMS
F)embedded system
G)firmware
H)multifunction devices
I)SCADA
J)embedded operating system 
A) Trusted Platform Module 
B) MILS 
C) RTLinux 
D) RTOS 
E) RTEMS
F)embedded system
G)firmware
H)multifunction devices
I)SCADA
J)embedded operating system

Question 8

Match each item with a statement below.
-Systems used for equipment monitoring in large industries,such as public works and utilities,power generators and dams

Accepted Answer

A) Trusted Platform Module 
B) MILS 
C) RTLinux 
D) RTOS 
E) RTEMS
F)embedded system
G)firmware
H)multifunction devices
I)SCADA
J)embedded operating system 
A) Trusted Platform Module 
B) MILS 
C) RTLinux 
D) RTOS 
E) RTEMS
F)embedded system
G)firmware
H)multifunction devices
I)SCADA
J)embedded operating system

Question 9

Match each item with a statement below.
-Microsoft's standard for managing Windows security patches on multiple computers in a network between 1994 and 2005

Accepted Answer

A) attack surface 
B) Windows Software Update Services 
C) Systems Management Server 
D) Server Message Block 
E) NetBEUI
F)Mandatory Access Control
G)Common Internet File System
H)System Center Configuration Manager
I)Remote Procedure Call
J)Samba 
A) attack surface 
B) Windows Software Update Services 
C) Systems Management Server 
D) Server Message Block 
E) NetBEUI
F)Mandatory Access Control
G)Common Internet File System
H)System Center Configuration Manager
I)Remote Procedure Call
J)Samba

Question 10

Which of the following source code is now available to the public and was considered a trimmed down version of the Windows desktop OS?

Accepted Answer

A)  VxWorks 
B)  Windows Embedded 8 
C)  Windows CE 
D)  Windows 10 IoT 
A)  VxWorks 
B)  Windows Embedded 8 
C)  Windows CE 
D)  Windows 10 IoT

Question 11

When using the Common Internet File System (CIFS),which security model does not require a password to be set for the file share?

Accepted Answer

A)  NT level security 
B)  Share-level security 
C)  User-level security 
D)  CIF level security 
A)  NT level security 
B)  Share-level security 
C)  User-level security 
D)  CIF level security

Question 12

What principle can be used to help reduce insider threats to an organization?

Accepted Answer

System administrators,network managers,a

Question 13

Match each item with a statement below.
-An OS security mechanism that enforces access rules based on privileges for interactions between processes,files,and users

Accepted Answer

A) attack surface 
B) Windows Software Update Services 
C) Systems Management Server 
D) Server Message Block 
E) NetBEUI
F)Mandatory Access Control
G)Common Internet File System
H)System Center Configuration Manager
I)Remote Procedure Call
J)Samba 
A) attack surface 
B) Windows Software Update Services 
C) Systems Management Server 
D) Server Message Block 
E) NetBEUI
F)Mandatory Access Control
G)Common Internet File System
H)System Center Configuration Manager
I)Remote Procedure Call
J)Samba

Question 14

Match each item with a statement below.
-A small program developed specifically for use with embedded systems

Accepted Answer

A) Trusted Platform Module 
B) MILS 
C) RTLinux 
D) RTOS 
E) RTEMS
F)embedded system
G)firmware
H)multifunction devices
I)SCADA
J)embedded operating system 
A) Trusted Platform Module 
B) MILS 
C) RTLinux 
D) RTOS 
E) RTEMS
F)embedded system
G)firmware
H)multifunction devices
I)SCADA
J)embedded operating system

Question 15

Match each item with a statement below.
-A Windows client/server technology introduced in 2005 used to manage patching and updating system software from the network

Accepted Answer

A) attack surface 
B) Windows Software Update Services 
C) Systems Management Server 
D) Server Message Block 
E) NetBEUI
F)Mandatory Access Control
G)Common Internet File System
H)System Center Configuration Manager
I)Remote Procedure Call
J)Samba 
A) attack surface 
B) Windows Software Update Services 
C) Systems Management Server 
D) Server Message Block 
E) NetBEUI
F)Mandatory Access Control
G)Common Internet File System
H)System Center Configuration Manager
I)Remote Procedure Call
J)Samba

Question 16

Which of the following if often found within an embedded OS that can cause a potential vulnerability to an attack?

Accepted Answer

A)  Web server 
B)  USB port 
C)  RAM 
D)  PCB 
A)  Web server 
B)  USB port 
C)  RAM 
D)  PCB

Question 17

Match each item with a statement below.
-A fast and efficient protocol that requires little configuration and allows transmitting NetBIOS packets over TCP/IP

Accepted Answer

A) attack surface 
B) Windows Software Update Services 
C) Systems Management Server 
D) Server Message Block 
E) NetBEUI
F)Mandatory Access Control
G)Common Internet File System
H)System Center Configuration Manager
I)Remote Procedure Call
J)Samba 
A) attack surface 
B) Windows Software Update Services 
C) Systems Management Server 
D) Server Message Block 
E) NetBEUI
F)Mandatory Access Control
G)Common Internet File System
H)System Center Configuration Manager
I)Remote Procedure Call
J)Samba

Question 18

What types of specific systems use VxWorks embedded real-time OS?

Accepted Answer

Systems using VxWorks include: - Clement

Question 19

Why do many people dismiss the topic of embedded device security?

Accepted Answer

Many dismiss the topic of embedded devic

Question 20

What type of malicious code could be installed in a system's flash memory to allow an attacker to access the system at a later date?

Accepted Answer

A)  BIOS-based rootkit 
B)  embedded browser 
C)  unclassified kernel 
D)  patch 
A)  BIOS-based rootkit 
B)  embedded browser 
C)  unclassified kernel 
D)  patch

Explain the BIOS-level rootkit SubVirt that was co-developed by Microsoft and the University of Michigan?

Why is it critical to protect SCADA systems from all types of unauthorized attacks?

Match each item with a statement below. -In 2007 became Windows new standard to deploy and manage servers alongside updated patch-management functionality

What should a password policy include?

Match each item with a statement below. -Any computer system that is not a general-purpose PC or server

SCADA systems controlling critical infrastructure are usually completely separated from the Internet by which of the following?

Match each item with a statement below. -A specialized embedded OS used in devices such as programmable thermostats,appliance controls,and even spacecraft

Match each item with a statement below. -Systems used for equipment monitoring in large industries,such as public works and utilities,power generators and dams

Match each item with a statement below. -Microsoft's standard for managing Windows security patches on multiple computers in a network between 1994 and 2005

Which of the following source code is now available to the public and was considered a trimmed down version of the Windows desktop OS?

When using the Common Internet File System (CIFS),which security model does not require a password to be set for the file share?

What principle can be used to help reduce insider threats to an organization?

Match each item with a statement below. -An OS security mechanism that enforces access rules based on privileges for interactions between processes,files,and users

Match each item with a statement below. -A small program developed specifically for use with embedded systems

Match each item with a statement below. -A Windows client/server technology introduced in 2005 used to manage patching and updating system software from the network

Which of the following if often found within an embedded OS that can cause a potential vulnerability to an attack?

Match each item with a statement below. -A fast and efficient protocol that requires little configuration and allows transmitting NetBIOS packets over TCP/IP

What types of specific systems use VxWorks embedded real-time OS?

Why do many people dismiss the topic of embedded device security?

What type of malicious code could be installed in a system's flash memory to allow an attacker to access the system at a later date?

Ethical Hacking Overview

Tcpip Concepts Review

Network and Computer Attacks

Footprinting and Social Engineering

Port Scanning

Enumeration

Programming for Security Professionals

Desktop and Server Os Vulnerabilities

Hacking Web Servers

Hacking Wireless Networks

Cryptography

Network Protection Systems

Filters

Exam 9: Embedded Operating Systems: the Hidden Threat

Explain the BIOS-level rootkit SubVirt that was co-developed by Microsoft and the University of Michigan?

Why is it critical to protect SCADA systems from all types of unauthorized attacks?

Match each item with a statement below. -In 2007 became Windows new standard to deploy and manage servers alongside updated patch-management functionality

What should a password policy include?

Match each item with a statement below. -Any computer system that is not a general-purpose PC or server

SCADA systems controlling critical infrastructure are usually completely separated from the Internet by which of the following?

Match each item with a statement below. -A specialized embedded OS used in devices such as programmable thermostats,appliance controls,and even spacecraft

Match each item with a statement below. -Systems used for equipment monitoring in large industries,such as public works and utilities,power generators and dams

Match each item with a statement below. -Microsoft's standard for managing Windows security patches on multiple computers in a network between 1994 and 2005

Which of the following source code is now available to the public and was considered a trimmed down version of the Windows desktop OS?

When using the Common Internet File System (CIFS),which security model does not require a password to be set for the file share?

What principle can be used to help reduce insider threats to an organization?

Match each item with a statement below. -An OS security mechanism that enforces access rules based on privileges for interactions between processes,files,and users

Match each item with a statement below. -A small program developed specifically for use with embedded systems

Match each item with a statement below. -A Windows client/server technology introduced in 2005 used to manage patching and updating system software from the network

Which of the following if often found within an embedded OS that can cause a potential vulnerability to an attack?

Match each item with a statement below. -A fast and efficient protocol that requires little configuration and allows transmitting NetBIOS packets over TCP/IP

What types of specific systems use VxWorks embedded real-time OS?

Why do many people dismiss the topic of embedded device security?

What type of malicious code could be installed in a system's flash memory to allow an attacker to access the system at a later date?

Ethical Hacking Overview

Tcpip Concepts Review

Network and Computer Attacks

Footprinting and Social Engineering

Port Scanning

Enumeration

Programming for Security Professionals

Desktop and Server Os Vulnerabilities

Hacking Web Servers

Hacking Wireless Networks

Cryptography

Network Protection Systems

Filters