OS hardening and security best practices in Operating Systems - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding OS Hardening Principles

Which of the following best describes the main goal of operating system hardening?

A To improve system performance by disabling unnecessary services

B To reduce the attack surface by removing or securing unnecessary components

C To allow all users full access to system files for easier management

D To increase the number of installed applications for better functionality

💡 Hint

Think about what makes a system less vulnerable to attacks.

OS hardening focuses on reducing the attack surface by removing or securing unnecessary components, which limits potential entry points for attackers.

📋 Factual

intermediate

Common OS Hardening Techniques

Which of the following is NOT a common OS hardening technique?

A Using default passwords for all user accounts

B Applying the latest security patches and updates

C Disabling unused network ports and services

D Configuring firewalls to restrict unauthorized access

💡 Hint

Consider what weakens security rather than strengthens it.

Using default passwords weakens security and is not a recommended hardening practice.

🔍 Analysis

advanced

Analyzing Security Risks from Misconfiguration

What is the most likely security risk if an OS has all user accounts configured with administrative privileges?

A Users can install software without restrictions, increasing malware risk

B The system will run faster due to fewer permission checks

C Users will be unable to access system files, causing errors

D The OS will automatically disable network connections

💡 Hint

Think about what happens when too many users have full control.

Granting all users administrative privileges allows them to install software freely, which can lead to malware infections and accidental system changes.

🚀 Application

advanced

Evaluating Firewall Configuration Impact

An administrator configures a firewall to block all incoming traffic except for ports 22 (SSH) and 80 (HTTP). What is the primary security benefit of this configuration?

A It allows all services to communicate freely, improving usability

B It prevents all outgoing traffic, stopping data leaks

C It limits exposure by only allowing essential services to be accessed externally

D It disables the firewall, making the system vulnerable

💡 Hint

Consider how restricting ports affects external access.

Allowing only necessary ports reduces the number of ways attackers can reach the system, improving security.

❓ Reasoning

expert

Determining the Outcome of Weak Password Policies

A company enforces a password policy that requires only 4 characters with no complexity rules. What is the most likely consequence of this policy on system security?

A Users will create complex passwords automatically

B The system will lock out users after one failed attempt

C Passwords will be strong and resistant to guessing attacks

D Passwords will be weak, making it easier for attackers to gain access

💡 Hint

Think about how password length and complexity affect security.

Short passwords without complexity are easy to guess or crack, weakening system security.