OS Security Fundamentals Quiz

1. True or False: User-mode processes can directly modify kernel memory without system calls.

True

False

2. Which cryptographic hash function is commonly used for password storage in modern operating systems?

Bcrypt or PBKDF2 with salt

MD5 without salt

Plain text storage

Base64 encoding

3. True or False: The setuid bit in Unix/Linux allows a program to execute with the permissions of its owner.

True

False

4. What is the primary advantage of containerization in OS security?

Isolates applications with separate namespaces and resource limits to reduce attack surface

Eliminates the need for passwords

Automatically fixes all vulnerabilities

Increases network bandwidth usage

5. True or False: A rootkit operates at the kernel level and can hide its presence from user-mode security tools.

True

False

6. Which of the following is NOT a typical OS hardening technique?

Installing bloatware on all systems

Disabling unnecessary services

Applying security patches regularly

Configuring strong password policies

7. What is the primary function of an OS audit log?

To record security-relevant events for detection and forensic analysis

To delete unauthorized user accounts

To automatically patch vulnerabilities

To increase system performance

8. True or False: ASLR (Address Space Layout Randomization) makes it easier for attackers to exploit memory-based vulnerabilities.

True

False

9. Which kernel security mechanism prevents code execution in data regions of memory?

Data Execution Prevention (DEP) or No-Execute (NX) bit

Virtual memory paging

Memory swapping

Cache coherence protocol

10. What is the role of a Security Descriptor in Windows operating systems?

Defines ownership and access permissions for objects like files and registry keys

Encrypts all network traffic

Monitors CPU temperature

Manages disk defragmentation

11. What is the primary purpose of privilege separation in operating systems?

To isolate user processes from kernel processes and prevent unauthorized access to system resources

To increase the speed of process execution

To reduce memory consumption

To simplify user interface design

12. Which system call vulnerability allows an attacker to read or write arbitrary memory locations?

Buffer overflow

DNS poisoning

Phishing attack

Man-in-the-middle attack

13. What is the purpose of Security-Enhanced Linux (SELinux)?

To implement Mandatory Access Control (MAC) policies for fine-grained security

To increase CPU processing speed

To replace all user passwords

To eliminate the need for firewalls

14. True or False: A firewall at the OS level can filter incoming and outgoing network traffic based on predefined rules.

True

False

15. Which of the following is a secure authentication method in modern operating systems?

Multi-factor authentication (MFA)

Single password stored in plain text

Hardcoded credentials in source code

Default manufacturer passwords

16. What does a file permission in Unix/Linux (e.g., 755) represent?

Read, write, execute permissions for owner, group, and others

File creation date and time

File size in bytes

Number of hard links to the file

17. True or False: The principle of least privilege requires that users have maximum access to all system resources.

True

False

18. Which encryption method is typically used to protect data at rest on an OS?

Full-disk encryption or file-level encryption

Compression algorithms

Fragmentation techniques

Cache invalidation

19. What is a common vulnerability exploited during privilege escalation attacks?

Unpatched software with security flaws

High network bandwidth

Large storage capacity

Multiple user accounts

20. Which access control model grants permissions based on user identity and explicit rules?

Discretionary Access Control (DAC)

Role-Based Access Control (RBAC)

Mandatory Access Control (MAC)

Attribute-Based Access Control (ABAC)

General OS Advanced System Security Fundamentals Quiz

1. True or False: User-mode processes can directly modify kernel memory without system calls.

2.

What first name or nickname would you like us to use?

2. Which cryptographic hash function is commonly used for password storage in modern operating systems?

3. True or False: The setuid bit in Unix/Linux allows a program to execute with the permissions of its owner.

4. What is the primary advantage of containerization in OS security?

5. True or False: A rootkit operates at the kernel level and can hide its presence from user-mode security tools.

6. Which of the following is NOT a typical OS hardening technique?

7. What is the primary function of an OS audit log?

8. True or False: ASLR (Address Space Layout Randomization) makes it easier for attackers to exploit memory-based vulnerabilities.

9. Which kernel security mechanism prevents code execution in data regions of memory?

10. What is the role of a Security Descriptor in Windows operating systems?

11. What is the primary purpose of privilege separation in operating systems?

12. Which system call vulnerability allows an attacker to read or write arbitrary memory locations?

13. What is the purpose of Security-Enhanced Linux (SELinux)?

14. True or False: A firewall at the OS level can filter incoming and outgoing network traffic based on predefined rules.

15. Which of the following is a secure authentication method in modern operating systems?

16. What does a file permission in Unix/Linux (e.g., 755) represent?

17. True or False: The principle of least privilege requires that users have maximum access to all system resources.

18. Which encryption method is typically used to protect data at rest on an OS?

19. What is a common vulnerability exploited during privilege escalation attacks?

20. Which access control model grants permissions based on user identity and explicit rules?