Exam 12: Operating System Security

______ is a reactive control that can only inform you about bad things that have already happened.

Manual analysis of logs is a reliable means of detecting adverse events.

_______ systems should validate all patches on test systems before deploying them to production systems.

_______ is the process of making copies of data at regular intervals allowing the recovery of lost or corrupted data over relatively short time periods of a few hours to some weeks.

______ is the process of retaining copies of data over extended periods of time,being months or years,in order to meet legal and operational requirements to access past data.

It is possible for a system to be compromised during the installation process.

Guest OSs are managed by a ______,or VMM,that coordinates access between each of the guests and the actual physical hardware resources.

Security concerns that result from the use of virtualized systems include ______.

Ideally new systems should be constructed on an unprotected network in order to prevent installation restrictions.

The first critical step in securing a system is to secure the __________.

Unix and Linux systems use a ________ which restricts the server's view of the file system to just a specified portion.

The range of logging data acquired should be determined _______.

A very common configuration fault seen with Web and file transfer servers is for all the files supplied by the service to be owned by the same "user" account that the server executes as.

Once the system is appropriately built,secured,and deployed,the process of maintaining security is ________.

The default configuration for many operating systems usually maximizes security.

The ______ process retains copies of data over extended periods of time in order to meet legal and operational requirements.

The most important changes needed to improve system security are to ______.

Configuration information in Windows systems is centralized in the _______,which forms a database of keys and values.

You should run automatic updates on change-controlled systems.

______ virtualization systems are more common in clients,where they run along side other applications on the host OS,and are used to support applications for alternate operating system versions or types.