Hardening

Question 1

What is the process of hardening in cybersecurity?

Answer 1

Enhancing system, application, or network security

Measures include applying security patches, configuring access controls, and disabling unnecessary services.

Question 2

List the measures involved in the hardening process.

Answer 2

• Apply security patches
• Configure access controls
• Disable unnecessary services

These measures aim to strengthen overall security posture and resilience against cyberattacks.

Question 3

What are default configurations?

Answer 3

Preset settings that come with a system or application

Changing default passwords, open ports, and insecure configurations is crucial for security.

Question 4

What is the purpose of restricting applications?

Answer 4

To control which applications can run on a workstation

This includes application allowlisting and blocklisting.

Question 5

What are the risks of running unnecessary services?

Answer 5

Increased attack surface and potential vulnerabilities

Disabling unnecessary services helps reduce these risks.

Question 6

Define trusted operating systems.

Answer 6

Operating systems designed to provide a secure computing environment

They enforce stringent security policies and often rely on mandatory access controls.

Question 7

What is the Evaluation Assurance Level (EAL)?

Answer 7

A predefined security standard and certification for evaluating security controls

EAL 1 is the lowest level, while EAL 7 is the highest.

Question 8

What is the difference between updates and patches?

Answer 8

• Updates: Additional functionality, may introduce vulnerabilities
• Patches: Fix security issues, should be applied immediately

Effective patch management is crucial for maintaining security.

Question 9

What is patch management?

Answer 9

Planning, testing, implementing, and auditing of software patches

It is important for compliance and security.

Question 10

What is the four-step process of patch management?

Answer 10

• Planning
• Testing
• Implementing
• Auditing

Each step is crucial for effective patch management.

Question 11

What are Group Policies in Windows environments?

Answer 11

A set of rules and policies applied to users or computer accounts

They help manage user and computer settings centrally.

Question 12

What is the purpose of secure baselines?

Answer 12

To establish a secure starting point for minimizing security risks

Secure baselines help in maintaining consistent security configurations.

Question 13

What is SELinux?

Answer 13

A security mechanism that provides an additional layer of security for Linux distributions

It enforces Mandatory Access Control (MAC).

Question 14

What are the three main contexts in SELinux?

Answer 14

• User Context
• Role Context
• Type Context

These contexts help in fine-grained access control.

Question 15

What are the modes of SELinux?

Answer 15

• Disabled Mode
• Enforcing Mode
• Permissive Mode

Each mode determines how SELinux policies are applied.

Question 16

What is the difference between allowlisting and blocklisting?

Answer 16

• Allowlisting: Only approved applications can run
• Blocklisting: All applications can run except those explicitly denied

Allowlisting is generally more secure than blocklisting.

Question 17

What is the role of Group Policy Editor?

Answer 17

To create and manage policies within a Windows environment

Access it by entering ‘gpedit’ in the run prompt.

Question 18

What is data encryption?

Answer 18

The process of converting data into a secret code to prevent unauthorized access

Different levels of data encryption exist, including full-disk and file encryption.

Question 19

What does SELinux capture in an audit log?

Answer 19

Violation messages

Violations occur when unauthorized access is attempted or actions contradict existing policies.

Question 20

What is required for initial SELinux setup to avoid false violations?

Answer 20

Policy tweaking and fine-tuning

Strong security depends on creating effective restricted profiles and hardening applications.

Question 21

Define Data Encryption.

Answer 21

Process of converting data into a secret code to prevent unauthorized access

Data encryption is crucial for protecting sensitive information.

Question 22

What are the levels of data encryption?

Answer 22

• Full-disk
• Partition
• Volume
• File-level
• Database
• Record

Each level serves different purposes in securing data.

Question 23

What does full-disk encryption do?

Answer 23

Encrypts the entire hard drive

This protects all data stored on the drive.

Question 24

What is the purpose of VeraCrypt?

Answer 24

Selectively encrypts partitions

It allows for encryption of sensitive documents while leaving the OS partition unencrypted.

Question 25

What does **file-level encryption** do?

Answer 25

Encrypts an individual file ## Footnote This is different from encrypting an entire partition or disk drive.

Question 26

What is a **secure baseline**?

Answer 26

Standard set of security configurations and controls ## Footnote It helps organizations maintain consistent security postures and mitigate common vulnerabilities.

Question 27

What is the first step in **establishing a secure baseline**?

Answer 27

Thorough assessment of the system, network, or application ## Footnote This includes identifying data types, workflows, and evaluating vulnerabilities.

Question 28

What are some **best practices** for defining a secure baseline?

Answer 28

* Industry standards * Compliance requirements (e.g., ISO 27001, NIST SP 800-53) ## Footnote These serve as starting points for creating a secure baseline.

Question 29

What is involved in **configuring a secure baseline**?

Answer 29

* Install and update the OS * Check against baseline configuration guides * Scan for vulnerabilities * Install required applications ## Footnote This ensures the system is secure and compliant.

Question 30

What tools can be used for **deployment** of secure baselines?

Answer 30

* Automated tools * Scripts * Group Policy Objects (GPO) in Windows * AWS Config in cloud environments ## Footnote These tools help ensure consistent application of the secure baseline.

Question 31

What is necessary for the **maintenance** of a secure baseline?

Answer 31

* Regular audits * Monitoring * Continuous assessment ## Footnote This keeps the baseline up-to-date and secure.

Question 32

What should be included in **employee training and awareness** regarding secure baselines?

Answer 32

* Importance of adhering to configurations * Risks of deviating from the baseline * Reporting suspicious activities ## Footnote Training helps mitigate risks associated with security deviations.