Deck 8: Operating System Hardening

Question 1

The concept of hardening the operating system involves properly configuring every machine for ____________ security.

A)default
B)firewall
C)maximum
D)optimum

Answer 1

D

Question 2

What version of Windows operating system provides the ability to set application policies?

A)Windows 2000
B)Windows 2000 Server
C)Windows XP
D)Windows 2003

Answer 2

D

Question 3

Which is NOT a privacy or security setting recommended for Netscape Navigator?

A)Check the remember passwords box so they do not have to be entered from a login screen.
B)Block pop-up windows so they will not appear.
C)Encrypt sensitive data.
D)Set cookies for a short duration such as three days or less.

Answer 3

A

Question 4

Information and settings for all the hardware,software,users,and preferences for any Microsoft Windows computer are maintained in the:

A)Config.com file
B)System32 file
C)SystemRoot
D)Windows Registry

Question 5

Certain Microsoft Web applications require a special default user account be created called ____________.

Question 6

Which is NOT a recommendation for securing Linux operating systems?

A)All console-equivalent access should be enabled for regular users.
B)Daemons not in use should be shut down.
C)No application should run as the root user unless absolutely necessary.
D)User and account policies should be set up the same as in Windows.

Question 7

What does the author suggest is probably the single greatest security threat to an individual system or corporate network?

A)The Internet
B)Network users
C)Patches
D)Spyware

Question 8

In Windows XP,what is the name of the file that contains the system registry information for that particular computer?

A)regedit32
B)ntuser.dat
C)system.dat
D)user.dat

Question 9

Which best describes a "security template"?

A)A file that automatically makes predetermined changes in security settings
B)A file used to deploy many individual settings centrally via Group Policy Objects
C)A reference list of standardized settings an administrator should enable
D)A list of administrator-established settings that everyone must make on their machine

Question 10

One of the first steps in hardening the operating system is to disable the default ____________ account and add a new one with an innocent sounding name.

Question 11

It is important for system administrators to remember that ____________ security is also the least usable.

Question 12

In Windows,what is the default maximum password age?

A)28 days
B)30 days
C)42 days
D)60 days

Question 13

In Windows,what is the default minimum password length?

A)0 characters
B)5 characters
C)8 characters
D)12 characters

Question 14

What steps should be taken to lessen hacker threats from Windows default accounts?

A)Default Administrator account should be deleted and default User account given Administrator privileges.
B)Default accounts should be deleted or disabled and a new account created with administrative privileges.
C)Default Administrator and User accounts should be deleted.
D)All default accounts should be deleted or disabled.

Question 15

Which Windows registry folder links to HKEY_LOCAL_MACHINE?

A)HKEY_CLASSES_ROOT
B)HKEY_CURRENT_CONFIG
C)HKEY_CURRENT_USER
D)HKEY_USERS

Question 16

Which would NOT be a default account on a Windows machine?

A)ASP.NET
B)Administrator
C)IUSR_machine name
D)username

Question 17

____________ the operating system refers to the process of properly configuring security on each machine,including servers.

Question 18

Which Windows registry key contains links to HKEY_USERS?

A)HKEY_CLASSES_ROOT
B)HKEY_CURRENT_CONFIG
C)HKEY_CURRENT_USER
D)HKEY_LOCAL_MACHINE

Question 19

Why are the default Windows account lockout policies considered not secure?

A)They permit hackers to access unencrypted password files.
B)They permit an infinite number of log-in attempts.
C)They permit access by selecting Cancel.
D)They permit users to access other's accounts.

Question 20

Why do some Windows system administrators recommend leaving the default administrator account enabled but moving it from the administrator's group and greatly restricting privileges?

A)There must be an administrator account for Windows to work properly.
B)The administrator account cannot be deleted,but reducing privileges reduces security risks from hackers.
C)Reducing privileges reduces security risks from hackers,but leaving the account enabled provides a better chance to track hacker activities.
D)Privileges on the default administrator account cannot be changed because it is the default Administrator account.

Question 21

In Microsoft Windows,the ____________ is a database of settings and options that control the operating system.

Question 22

When using Windows 2000 or newer file encryption capabilities,files are automatically encrypted and decrypted because the process is ____________ for the same user on the same machine.

Question 23

Due to the increase in spyware,____________ settings are as important as security settings in hardening the operating system.

Question 24

Microsoft's Internet Information Service (IIS)creates a special default user account called ____________ followed by the computer name.

Question 25

The entire set of rules governing passwords such as length,age,complexity,and history is known as password ____________.

Question 26

In Linux,services are known as ____________.

Question 27

With Windows 2000 or newer,transparent file encryption is maintained by ____________.

Question 28

Turning on port ____________ to prevent unwanted traffic is a basic hardening step when using Windows 2000 or XP Internet Connection Firewall.