Embedded Operating Systems

Question 1

Most printers now have only TCP/IP enabled and don’t allow default administrator passwords, so they’re inherently more secure. True or False?

Answer 1

False

Question 2

What type of malicious code could be installed in a system’s flash memory to allow an attacker to access the system at a later date?

Answer 2

BIOS-Based Rootkit

Question 3

Which one of the following, if compromised might allow attackers the ability to gain complete access to network resources?

Answer 3

Router

Question 4

Originally, which of the following was used to perform routing and switching before specialized hardware was developed?

Answer 4

General Purpose Computers

Question 5

*nix embedded OSs are most likely to be found on which of the following devices?

Answer 5

Servers

Question 6

What open-source embedded OS is found in many space systems because it supports processors designed specifically to operate in space?

Answer 6

QNX

Question 7

An embedded OS must be developed specifically for use with embedded systems. True or False?

Answer 7

False

Question 8

The lack of familiar interface, such as CD/DVD-ROM drives, contributes to the difficulty of updating embedded OSs. True or False?

Answer 8

False

Question 9

SCADA systems controlling critical infrastructure are usually seperated from the Internet by which of the following?

Answer 9

Air Gap

Question 10

Both general-purpose and embedded OSs use drives to interface with hardware devices.

Answer 10

True

Question 11

Wind River produces an open-source Linux OS for embedded systems and an OS micokernel extension called which of the following?

Answer 11

RTEMS

Question 12

VxWorks is widely used embedded real-time OS developed by Microsoft.

Answer 12

False

Question 13

Multifunction devices (MFDs) are rarely which of the following?

Answer 13

Scanned for vulnerabilities

Question 14

Which of the following is an advantage of Windows CE over other Windows embedded OSs?

Answer 14

Its source code is available to the public

Question 15

Windows 10 IoT provides the full Windows API and can perform many of the same tasks that the desktop version can.

Answer 15

False

Question 16

Which of the following can be a small program developed specifically for use with embedded systems, or a stripped-down version of an OS commonly used on general-purpose computers?

Answer 16

Embedded OS

Question 17

Cell phone vulnerabilities make it possible for attackers to do which of the following?

Answer 17

Clone your phone to make illegal long-distance phone callls.
Use your phone as microphone to eavesdrop on meeting or private conversations.
Listen to your phone conversations.

Question 18

Embedded OSs on routers are susceptible to which following?

Answer 18

Password-guessing attacks
Buffer overflow attacks
Authentication bypass attacks

Question 19

Which of the following can be small program developed specifically for use with embedded systems, or a stripped-down version of an OS commonly used on general-purpose computers?

Answer 19

Embedded OS

Question 20

If the time and money required to compromise an embedded system exceeds the value of the system’s information, a security tester might recommend not fixing the vulnerability. True or False?

Answer 20

True

Question 21

A common vulnerability of routers and other network devices with built-in Web management interfaces is which of the following?

Answer 21

Authentication vulnerability

Question 22

Which of the following is a specialized type of embedded OS that is typically used in devices such as programmable thermostats, applicance controls, and even spacecraft?

Answer 22

RTOS

Question 23

Which of the following systems should be used when equipment monitoring and automation is critical?

Answer 23

SCADA

Question 24

SCADA systems are used for which of the following?

Answer 24

Monitoring equipment in large-scale industries

Question 25

One reason that some vendors of embedded OSs are using open-source software more is that the cost of developing and patching an OS is shared by the entire-source community. True or False?

Answer 25

True

Question 26

Some vendors of embedded OSs are using which of the following types of software, so the cost of developing and patching an OS is shared by the entire community?

Answer 26

Open-Source

Question 27

What type of embedded OS is certified to run multiple levels of classification; such as unclassified, secret, and top secret, on the same CPU without leakage between levels?

Answer 27

MILS

Question 28

Embedded OSs are usually designed to be small and efficient so they do not have some of the functions that general-purpose OSs have.

Answer 28

True

Question 29

Which of the following is a major challenge of securing embedded OSs?

Answer 29

Patching

Question 30

A device that performs more than one function, such as printing and faxing is called which of the following?

Answer 30

MFD