What is an operating system (OS) really doing?
It acts as the middle layer between hardware and applications—managing CPU, memory, storage, processes, and user access so software can run.
Why is the OS critical for security?
Because it controls access, permissions, processes, and system behavior—if compromised, the entire system is compromised.
What is a process in a system?
A running instance of a program that consumes system resources like CPU and memory.
Why do ISSOs care about processes?
Malicious processes can indicate compromise or unauthorized activity.
What is memory (RAM) used for?
Temporary storage for active processes and data being used by the system.
What is a server at a technical level?
A system designed to provide services, resources, or data to multiple clients over a network.
What is an endpoint?
A user-facing device like a laptop or workstation used to access systems.
Why are servers higher risk than endpoints?
They host critical services and multiple users depend on them—compromise has wider impact.
Give examples of servers.
Domain controller, web server, database server, file server.
Give examples of endpoints.
Laptops, desktops, tablets.
What is authentication?
Verifying identity (username/password, smart card, etc.)
What is authorization?
Determining what a user is allowed to access.
Why is least privilege important?
It limits damage if an account is compromised.
What happens if users have excessive privileges?
Increased risk of accidental or malicious system compromise.
What is system configuration?
Settings that control how a system operates (security, services, access).
Why is configuration critical for security?
Misconfigurations are one of the most common vulnerabilities.
What is hardening in system terms?
Reducing vulnerabilities by securing configurations and disabling unnecessary features.
Example of hardening?
Disabling unused services or enforcing password policies.
What is a service?
A background process that performs a specific function (e.g., web server, authentication service).
Why are services important for security?
Each service is a potential attack vector.
What happens if unnecessary services are running?
Increased attack surface.
What is patching?
Installing updates that fix bugs or security vulnerabilities.
Why is patching critical?
Many attacks exploit known vulnerabilities that patches fix.
What happens if systems are not patched?
They remain vulnerable to known exploits.
