What is Role-Based Access Control (RBAC)?

Assigning permissions based on roles or job functions

What is a common method for defending against SQL Injection attacks in secure software development?

Using parameterized queries and prepared statements

What is security hardening in the context of OS management?

Disabling unused services and updating software regularly

What is the role of the "root" account in Unix-based systems?

Grants full control over the system

What does BitLocker do in Microsoft Windows?

Encrypts the entire disk for data protection

What is the main purpose of security in an operating system (OS)?

To prevent unauthorized access to system resources

What is one common use case of RTOS?

Embedded systems like medical devices and avionics

Which of the following is an example of malicious software (malware)?

A tool that encrypts user files and demands payment for decryption

What is the role of the NTFS file system in Windows security?

Supports file-level permissions and encryption

Which authentication method involves multiple forms of identification to verify user identity?

Multi-factor authentication (MFA)

What is a secure coding practice?

Using input validation and sanitization to prevent injection attacks

In Solaris, what does the "zone" feature allow?

Isolates applications and data for improved security

How does Solaris implement Role-Based Access Control (RBAC)?

By delegating administrative tasks through user_attr and auths files

How does Windows User Account Control (UAC) improve system security?

Limits administrative access to critical system settings

What does the "Secure Boot" feature in Solaris do?

Prevents unauthorized code execution during system startup

What is the “least privilege” principle in OS security?

Granting users the minimum access needed to perform their jobs

In secure software development, what is the purpose of the Secure Software Development Lifecycle (SSDLC)?

To include security measures at every stage of development

studbud

PRE5 Quiz - Semi Finals

20 termsStudBud Administration2 plays

Imported from external platform

Flashcards20 cardsFPractice quizPHost liveL

Questions 20

Answers

1
What is Role-Based Access Control (RBAC)?
Allowing users to access all system resources
Granting permissions based on user ownership
Assigning permissions based on roles or job functions
Restricting access based on system policies
2
What is a common method for defending against SQL Injection attacks in secure software development?
Limiting the number of users accessing the database
Encrypting user data
Reducing the overall size of the database
Using parameterized queries and prepared statements
3
What is security hardening in the context of OS management?
Reducing system speed
Disabling unused services and updating software regularly
Restricting all system services
Allowing users full system access
4
What is the role of the "root" account in Unix-based systems?
Manages user-level applications
Encrypts all system files
Grants full control over the system
Provides restricted user access
5
What does BitLocker do in Microsoft Windows?
Tracks system event logs
Encrypts the entire disk for data protection
Filters unwanted network traffic
Manages user account permissions
6
What is the main purpose of security in an operating system (OS)?
To monitor system performance
To prevent unauthorized access to system resources
To ensure user convenience
To make the system faster
7
Which of the following is NOT a common security mechanism in Unix-type operating systems?
System logging using auditd
Disk encryption via BitLocker
Access Control Lists (ACLs)
User authentication via passwords
8
What is one common use case of RTOS?
General-purpose office applications
Home computer operating systems
Embedded systems like medical devices and avionics
Web server management
9
Which of the following is an example of malicious software (malware)?
A tool that encrypts user files and demands payment for decryption
A firewall system that prevents unauthorized access
A system that monitors network traffic
A program that helps users recover lost passwords
10
Which Windows feature helps prevent unauthorized access to system files?
BitLocker
NTFS File System
SmartScreen Filter
User Account Control (UAC)
11
What is the role of the NTFS file system in Windows security?
Prevents users from accessing system settings
Restricts network access
Supports file-level permissions and encryption
Encrypts all user files automatically
12
Which authentication method involves multiple forms of identification to verify user identity?
Biometrics
Password authentication
Access Control List
Multi-factor authentication (MFA)
13
What is a secure coding practice?
Hardcoding passwords into the code for easy access
Using input validation and sanitization to prevent injection attacks
Ignoring security during the development phase
Allowing all user inputs without restriction
14
In Solaris, what does the "zone" feature allow?
Increases system performance
Increases system vulnerabilities
Isolates applications and data for improved security
Adds extra user accounts
15
How does Solaris implement Role-Based Access Control (RBAC)?
By allowing unrestricted root access
By using the sudo command for all access requests
By using mandatory access control (MAC)
By delegating administrative tasks through user_attr and auths files
16
How does Windows User Account Control (UAC) improve system security?
Limits administrative access to critical system settings
Monitors network traffic for malicious activity
Provides full administrative privileges by default
Allows all users to install software without restriction
17
What does the "Secure Boot" feature in Solaris do?
Prevents unauthorized code execution during system startup
Encrypts all data stored on the disk
Protects the kernel from unauthorized changes
Provides automatic software updates
18
What is the “least privilege” principle in OS security?
Granting users the minimum access needed to perform their jobs
Allowing unrestricted access for system maintenance
Limiting users to only administrative tasks
Giving users full access to all system resources
19
Which of the following is NOT a characteristic of Real-Time Operating Systems (RTOS)?
Deterministic performance for time-sensitive tasks
Minimal resource management
Strict control over system resource access
Unpredictable task execution
20
In secure software development, what is the purpose of the Secure Software Development Lifecycle (SSDLC)?
To make software compatible with all platforms
To minimize the software's cost
To include security measures at every stage of development
To focus on the aesthetic design of the application

PRE5 Quiz - Semi Finals Flashcards | StudBud