Operating System Security Flashcards

What is the principle of least privilege in operating system security?

Answer: Granting users and processes only the minimum permissions necessary to perform their required tasks

The principle of least privilege limits each user, process, and application to only the access rights needed for their legitimate functions, minimizing the potential damage from compromised accounts or malicious software.

Why are operating system security patches important?

Answer: They fix known vulnerabilities that attackers can exploit to compromise the system

Security patches fix discovered vulnerabilities in the operating system that, if left unpatched, provide known entry points for attackers to exploit for unauthorized access or malware installation.

What is the purpose of User Account Control (UAC) in Windows?

Answer: To notify users and require confirmation before applications make system-level changes that could affect security

UAC prompts users for confirmation before allowing applications to make changes that require administrator privileges, preventing unauthorized software from silently making system-level modifications.

What is full disk encryption and why is it recommended for operating system security?

Answer: Encrypting the entire contents of a storage drive so data is unreadable without the proper authentication credentials

Full disk encryption protects all data on the drive by encrypting it, ensuring that if the device is lost, stolen, or the drive is removed, the data remains unreadable without proper authentication.

What is a host-based firewall and how does it differ from a network firewall?

Answer: A host-based firewall runs on individual computers to filter traffic for that specific device, while a network firewall protects an entire network at its boundary

A host-based firewall runs on a single computer and controls incoming and outgoing network traffic for that specific device, providing protection even when the device is outside the network firewall's perimeter.

Why should you avoid using an administrator account for daily computing tasks?

Answer: Malware that runs under an administrator account gains full system access, while a standard account limits the damage malware can cause

Using a standard account for daily tasks limits the damage that malware can inflict because it inherits the restricted permissions of the account, preventing system-wide changes without explicit elevation.