Chapter 9

Question 1

Which of the following can be a small program developed specifically for use with embedded systems, or a stripped-down version of an OS commonly used on general-purpose computers?

Answer 1

embedded OS

Question 2

The lack of a familiar interface, such as CD/DVD-ROM drives, contributes to the difficulty of updating embedded OSs. True or False?

Answer 2

True

Question 3

A device that performs more than one function, such as printing and faxing is called which of the following?

Answer 3

MFD

Question 4

What type of embedded OS is certified to run multiple levels of classification; such as unclassified, secret, and top secret, on the same CPU without leakage between levels?

Answer 4

MILS

Question 5

Most printers now have only TCP/IP enabled and don’t allow default administrator passwords, so they’re inherently more secure. True or False?

Answer 5

False

Question 6

Multifunction devices (MFDs) are rarely which of the following?

Answer 6

Scanned for vulnerabilities

Question 7

Embedded OSs are usually designed to be small and efficient so they do not have some of the functions that general-purpose OSs have.

Answer 7

True

Question 8

Originally, which of the following was used to perform routing and switching before specialized hardware was developed?

Answer 8

general purpose computers

Question 9

One reason that some vendors of embedded OSs are using open-source software more is that the cost of developing and patching an OS is shared by the entire open-source community. True or False?

Answer 9

True

Question 10

Which one of the following, if compromised might allow attackers the ability to gain complete access to network resources?

Answer 10

router

Question 11

Why are embedded OSs more likely to have unpatched security vulnerabilities than general-purpose OSs do? (Choose all that apply.)

Answer 11

Manufacturers prefer that you upgrade the system rather than the embedded OS.

Devices with embedded OSs typically can’t have any downtime for installing
patches.

Many security checks are omitted during development to reduce the code size.

Question 12

SCADA systems controlling critical infrastructure are usually separated from the Internet by which of the following?

Answer 12

air gap

Question 13

air gap

Answer 13

RTLinux

Question 14

Some vendors of embedded OSs are using which of the following types of software, so the cost of developing and patching an OS is shared by the entire community?

Answer 14

open-source

Question 15

Cell phone vulnerabilities make it possible for attackers to do which of the following? (Choose all that apply.)

Answer 15

Clone your phone to make illegal long-distance phone calls.
Listen to your phone conversations.
Use your phone as a microphone to eavesdrop on meetings or private conversations.

Question 16

A common vulnerability of routers and other network devices with built-in Web management interfaces is which of the following?

Answer 16

authentication vulnerability

Question 17

*nix embedded OSs are most likely to be found on which of the following devices?

Answer 17

Cisco switches and routers

Question 18

What open-source embedded OS is found in many space systems because it supports processors designed specifically to operate in space?

Answer 18

RTEMS

Question 19

Windows 10 IoT provides the full Windows API and can perform many of the same tasks that the desktop version can.

Answer 19

True

Question 20

If the time and money required to compromise an embedded system exceeds the value of the system’s information, a security tester might recommend not fixing the vulnerability. True or False?

Answer 20

True

Question 21

SCADA systems are used for which of the following?

Answer 21

Monitoring equipment in large-scale industries

Question 22

An embedded OS must be developed specifically for use with embedded systems. True or False?

Answer 22

False

Question 23

Which of the following is a specialized type of embedded OS that is typically used in devices such as programmable thermostats, appliance controls, and even spacecraft?

Answer 23

RTOS

Question 24

Both general-purpose and embedded OSs use drivers to interface with hardware devices.

Answer 24

True

Question 25

Which of the following systems should be used when equipment monitoring and automation is critical?

Answer 25

SCADA

Question 26

Which of the following is an advantage of Windows CE over other Windows embedded OSs?

Answer 26

Its source code is available to the public.

Question 27

Which of the following is a major challenge of securing embedded OSs?

Answer 27

Patching

Question 28

VxWorks is a widely used embedded real-time OS developed by Microsoft.

Answer 28

False

Question 29

What type of malicious code could be installed in a system’s flash memory to allow an attacker to access the system at a later date?

Answer 29

BIOS-based rootkit

Question 30

Embedded OSs on routers are susceptible to which of the following? (Choose all that apply.)

Answer 30

Authentication bypass attacks
Password-guessing attacks
Buffer overflow attacks