OS Security & Privacy

Question 1

Define Hypervisor

Answer 1

A program used to run one or multiple Virtual Machines

Question 2

Are Virtual Machines for privacy

Answer 2

Made for security but can be configure with privacy features
- Although hypervisor was made by someone else so not trustworthy

Question 3

What is the job of the Operating System

Answer 3

The OS has full control of all system and application software on the machine
File, memory and process management, handling I/O, and controlling peripheral devices like disk drives and printers

Question 4

Where does the OS fall in the hierarchy

Answer 4

Hardware
OS
Applications / Software
User

Question 5

What are some security and privacy focused UNIX-like OS’s

Answer 5

QubesOS
Debian
ArchLinux
Tails
SupgraphOS
Whonix

Question 6

Is iOS a closed or open OS

Answer 6

Closed - this means its propriety code is hidden and un-editable
Less freedom, Better for security though

Question 7

Where can you find known vulnerabilities for an OS

Answer 7

CVE Details

Question 8

What is the popular and therefore most targeted OS

Answer 8

Windows

Question 9

How much of Windows usage share belongs to Windows 7

Answer 9

40%

Question 10

What is now the most used form of computer and therefore due to be the most targeted form

Answer 10

Phones (51.5% of computer usage share)

Question 11

Can windows 10 be used for security and privacy prioritisation

Answer 11

Absolutely not

Question 12

What is an Advertising ID

Answer 12

A unique ID assigned to each instance of an OS for targeted advertising by 3rd parties

Question 13

What is some of the sensitive data Cortana collects

Answer 13

ALL DATA
History
Keystrokes
Microphone/Camera
Movements/GPS
Contacts/Relationships
Emails, Texts, Calls
Card details/Purchases

Question 14

Why is Wi-Fi sharing not recommended

Answer 14

Because the system will have to store all Wi-Fi passwords and you have to trust they wont do anything malicious

Question 15

Define Telemetry Data

Answer 15

Telemetry is the automatic recording and transmission of data from remote or inaccessible sources to an IT system in a different location for monitoring and analysis

Question 16

What is the Phone-Home function

Answer 16

A term used to describe a software installation function which will use an Internet connection to send information back to the devs, usually without the users knowledge

Question 17

Why should you never really use an account with Admin privileges

Answer 17

In Windows: 86% of all CVEs can be mitigated by not running admin privileges
if an admin user is exploited, then the hacker will have admin privilege’s too