CSCU Operating System Security 3

Question 1

What is secure boot and what threat does it protect against?

Accepted Answer

A firmware-level security mechanism that ensures only trusted, digitally signed software loads during the boot process, preventing bootkit malware

Answer

Secure Boot verifies the digital signatures of all software components loaded during startup (bootloader, drivers, OS kernel), preventing rootkits and bootkits from compromising the system before the OS loads.

Question 2

What is application sandboxing in operating systems?

Accepted Answer

Isolating applications in a restricted environment that limits their access to system resources and other applications' data

Answer

Sandboxing confines applications within restricted environments that limit their access to files, system resources, and other programs, containing potential damage if an application is compromised.

Question 3

What is the purpose of audit logging in operating system security?

Accepted Answer

To record security-relevant events such as login attempts, file access, and system changes for monitoring and forensic investigation

Answer

Audit logs create a chronological record of security events including authentication attempts, privilege changes, file access, and system modifications, enabling threat detection and forensic analysis.

Question 4

What is a Group Policy and how does it enhance operating system security in enterprise environments?

Accepted Answer

A Windows mechanism that allows administrators to centrally define and enforce security settings across all computers in a domain

Answer

Group Policy in Windows Active Directory environments allows administrators to centrally define and enforce security configurations—password policies, software restrictions, firewall rules—across all domain-joined computers.

Question 5

What is the security significance of disabling unnecessary operating system services?

Accepted Answer

Each running service is a potential attack vector, so disabling unused services reduces the system's attack surface

Answer

Unnecessary services that are running increase the attack surface by providing additional entry points that attackers can exploit if vulnerabilities exist in those services.

CSCU - Certified Secure Computer User Practice Test

CSCU - Certified Secure Computer User Practice Test

CSCU Operating System Security 3