Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Comptia Security+ Personal > Section 6: Hardening > Flashcards

Section 6: Hardening Flashcards

1
Q

What is Hardening?

A

Act of configuring an OS securely by updating it, creating rules and policies to govern it, and removing unnecessary applications and services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is Least Functionality?

A

Process of configuring workstation or server to only provide essential applications and services

  • restrict unneeded applications
  • ports
  • services
  • protocols
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is another method of Least Functionality?

A

Uninstalling all unneeded apps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What happens sometimes when you install a newer version of an app?

A

The previous version remains installed.

  • Uninstall it manually
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

When adding new computers, what should you do with the image?

A

Utilise a secure baseline image

  • OS
  • minimum apps required
  • strict configuration policies
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is SCCM?

A

Microsoft System Center Configuration Management

  • allows admins to manage large amounts of software across a network
  • push updates and configurations
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is Application Whitelist?

A

Process of allowing applications to run only if they are on the white list

  • explicit allow statement
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is an Application Blacklist?

A

Block specific applications from running if they are on the blacklist

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which is more secure, Application Whitelisting or Blacklisting

A

White Listing

  • but more difficult to setup and manage
  • have to adjust your list every time you need a new app
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What are some problems with Application Blacklisting?

A

New variations of malware that are not known will not be blocked since you have to manually add them to the list

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Can whitelisting and blacklisting be centrally managed?

A

Yes

  • By using Active Directory Domain Control and be updated through policies
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are Services in an OS?

A

Type of applications working in the background of the OS and perform various functions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What should you do with unneeded serviecs?

A

Disabled in the OS

  • services.msc
  • find the service you want to stop → Stop it → Change ‘Startup type’ to Disabled to prevent it from starting up when rebooting
  • this is helpful with a service malware that installs itself as a service - follow those steps to remove it better

same thing can be done with cmd

  • sc stop wuauserv (or what ever name of service)
  • or net stop (service name)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How do you see services and stop them in Linux & Mac OS?

A
  • ‘top’ in terminal shows processes
  • get the PID and type ‘kill ####’
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is a Trusted Operating System (TOS)?

A

Any OS that meets the requirements set forth by governments and has multilevel security

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What OS meet the criteria for TOS?

A
  • Windows 7 - and newer
  • Mac OS X 10.6 - and newer
  • FreeBSD (TrustedBSD)
  • Red Hat Enterprise Server
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is a requirement to stay TOS

A

Frequent patching and staying up to date

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

How do you identify the current version and build of your OS prior to updating a system?

A

Windows - msinfo32.exe in cmd

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What are patches?

A

A single problem-fixing piece of software for an operating system or application

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is a hotfix?

A

Exact same as a patch

-A single problem-fixing piece of software for an operating system or application

  • Originally it meant that you did not need to reboot the system after a hotfix where as a patch does
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What are the categories of updates?

A
  1. Security Update
  2. Critical Update
  3. Service Pack
  4. Windows Update
  5. Driver Update
22
Q

What is a Security Update?

A

Software code that is issued for a product-specific security-related vulnerability

  • corrects the bug in the code
23
Q

What is a critical update?

A

Software code for a specific problem addressing a critical, non-security bug in the software

  • e.g. google chrome crashing when loading facebook
24
Q

What is a service pack?

A

A tested, cumulative grouping of patches, hotfixes, security updates, critical updates, and possibly some feature or design changes

25
Q

What is a driver update?

A

Updated device driver to fix a security issue or add a feature to a supported piece of hardware

26
Q

What is Patch Management?

A

Process of planning, testing, implementing, and auditing of software patches

27
Q

What are the 4 steps of patch management?

A
  1. Planning
  2. Testing
  3. Implementing
  4. Auditing
28
Q

What does Planning include in patch management?

A

Verify the patch is compatible with your systems and plan for how you will test and deploy

  • MBSA Microsoft Baseline Security Analyzer
  • identify misconfigurations
29
Q

What does Testing include in patch management?

A

Always test a patch prior to automating its deployment

30
Q

What does Implementing include in patch management?

A

Manually or automatically deploy the patch to all your clients to implement it

  • large orgs centrally manage updates through an update server
  • disable the ‘wuausery’ service to prevent Windows Update from running automatically
31
Q

What does Auditing include in patch management?

A

Important to audit the client’s status after a patch deployment

32
Q

Does Linux and OSX have built-in patch management systems too?

A

Yes

33
Q

What is a Group Policy?

A

A set of rules or policies that can be applied to a set of users or computer accounts within the operating system

  • access the Group Policy Editor by opening the Run prompt and enter ‘gpedit’
34
Q

What kind of rules can you add through Group Policies?

A
  • Password complexity
  • account lockout policy
  • software restrictions
  • application restrictions
35
Q

What does the Active Directory Domain Controller have a more advanced version of?

A

Group Policy Editor

36
Q

What is a Group Policy Objective (GPO)

A

Objectives that aid in the hardening of the OS

  • helps establishing a security baseline
37
Q

What is Baselining?

A

Process of measuring changes in the network, hardware, and software environment

  • baseline establishes a standard or what is normal so you can find deviations when they happen
38
Q

What are the 2 Deviation Categories?

A
  1. Acceptable & Expected
  2. Issue to investigate further
39
Q

How do you access and edit the Group Policy?

A

gpedit

40
Q

Can you add group policies per computer or per user?

A

Both

41
Q

How do you add whitelist/blacklist rules in Windows?

A

Computer Configuration → Windows Settings → Security Settings → Application Control Policies → AppLocker → Executable Rules → Right click and create new rule (white/blacklist)

42
Q

Do you allow or deny with Whitelist?

A

Allow

43
Q

Do you allow or deny with Blacklist?

A

Deny

44
Q

What can you deny based on?

A
  1. Publisher
    - e.g. Microsoft
  2. Path
    - specific file or folder
  3. File Hash
    - helpful for malwares, every file has a unique hash
45
Q

Its a good practice to block anything running from which directory?

A

/temp

46
Q

What are the most common file systems used by OS’s?

A
  1. NTFS (New Technology File System)
  2. FAT32
  3. ext4
  4. HFS+
  5. APFS (Apple File System)
47
Q

What file system can Windows utilise?

A

NTFS or FAT32

  • NTFS is highly recommended
48
Q

What is NTFS?

A

New Technology File System is the default file system format for Windows and is more secure because it supports logging, encryption, larger partition sizes, and larger file sizes than FAT32

49
Q

What can you do if you are using FAT32 and want to convert to NTFS without losing data?

A
  • open cmd and type ‘convert G:/FS:NTFS
50
Q

What file systems do Linux and Mac OS use?

A

Linux - ext4
Mac - APFS

51
Q

What are the 5 things you can do to slow degradation process and recovery easy for your harddrives?

A
  1. Remove temporary files using Disk Cleanup
  2. Periodic System file system checks
    - win - CHKDSK nfsystem filechecker
    - linux - fsck
    - mac - firstaid within disk utility
  3. Defragment your disk drive
  4. backup your data
  5. Use and practice restoration techniques
    - restoring system restore point
    - tape backup
    - backing up hdd
    - restoring individual field from backups
52
Q

§

A

Comptia Security+ Personal (9 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions