Operating system security

Question 1

Examples of items that the Harbian Linux security auditing script can detect?

Answer 1

i. User group assignments
ii. Suid files
iii. File permissions on configuration files

Question 2

Microsoft Security features

Answer 2

1. Microsoft Defender
2. Windows Hello
3. Threat protection
4. Intrusion detection system

Question 3

Container Security Benefits

Answer 3

Isolation: Containers isolate applications, reducing attack surface.
Immutable Infrastructure: Containers are immutable, minimising configuration drift.

Question 4

Static Analysis for Security Testing

Answer 4

Code Review: Identify insecure coding practices and known vulnerabilities.
Dependency Analysis: Identify outdated or vulnerable third-party libraries and components.

Question 5

Dynamic Analyses for Security Testing

Answer 5

Penetration Testing: Probe system defenses and assess resilience to security threats.
Fuzz Testing: Identify vulnerabilities like buffer overflows and injection flaws.

Question 6

Windows Server Security Benefits

Answer 6

Robust User Access Control:
Windows Server offers advanced user access control mechanisms like Active Directory and Group Policy.
Administrators can finely tune user permissions, reducing the risk of unauthorized access.

Integrated Security Features:
Windows Server includes built-in security features like Windows Defender Antivirus and BitLocker Drive Encryption.
Regular security patches and updates are provided by Microsoft to address vulnerabilities.