HARDENING

Question 1

A standardized workstation setup, including OS, essential applications, and strict policies in corporate networks

Answer 1

Secure Baseline Imaging

Question 2

A security measure that permits only approved applications to run on an OS

Answer 2

Allowlisting

Question 3

Entails preventing listed applications from running, allowing all others to execute

Answer 3

Blocklisting

Question 4

Background applications that operate within the OS, executing a range of tasks

Answer 4

Services

Question 5

Designed to provide a secure computing environment by enforcing stringent security policies that usually rely on mandatory access controls

Answer 5

TOS

Question 6

Set of controls that are installed on top of another Linux distribution like CentOS or Red Hat Linux

Answer 6

SELinux
(Security-Enhanced Linux)

Question 7

A software patch that solves a security issue and should be applied immediately after being tested in a lab environment

Answer 7

Hotfix

Question 8

Provides a system with additional functionality, but it does not usually provide any patching of security related issues

Answer 8

Update

Question 9

Includes all the hotfixes and updates since the release of the OS

Answer 9

Service Pack

Question 10

Planning, testing, implementing, and auditing of software patches

Answer 10

Patch Management

Question 11

Creating policies, procedures, and systems to track and verify patch compatibility

Answer 11

Planning

Question 12

Set of rules or policies that can be applies to a set of users or computer accounts within an OS

Answer 12

Group Olicies

Question 13

Permission schemes that are designed by various properties for a given file or process

Answer 13

Context-based Permission

Question 14

Default context-based permission scheme that’s included inside of CentOS and Red Hat Enterprise Linux

Answer 14

SELinux

Question 15

Defines what users can access an object

Answer 15

User

Question 16

Defines what roles can access a given object

Answer 16

Role

Question 17

Groups objects together that have similar security requirements or characteristics

Answer 17

Type

Question 18

Used to describe the sensitivity level of a given file, directory, or process

Answer 18

Level

Question 19

Process of converting data into a secrect code to prevent unauthorized access

Answer 19

Data Encryption

Question 20

Encrypts the entire hard drive to protect all of the data being stored on it

Answer 20

Full Disk Encryption

Question 21

Similar to full-disk encryption, but it is only applied to a specific partition on the storage device

Answer 21

Partition Encryption

Question 22

Used to encrypt a set space on the storage medium, creating an encrypted container that can house various files and folders

Answer 22

Volume Encryption

Question 23

Secure the entire database, extending to multiple storage devices or cloud storage, similar to full-disk encryption

Answer 23

Database Encryption

Question 24

Used to encrypt individual records or rows within a database

Answer 24

Record-level Encryption

Question 25

Standard security configuration applied to guarantee minimum security for a system, network, or application

Answer 25

Secure Baseline