Operating Systems for Programmers - Module 5 - Post-Quiz

Question 1

In the UNIX operating system, a domain is associated with the ____.

Accepted Answer

user

Answer

process

Answer

procedure

Answer

task

Question 2

The most common method used by attackers to breach security is ____.

Accepted Answer

masquerading

Answer

message modification

Answer

session hijacking

Answer

phishing

Question 3

In MULTICS, the protection domains are organized in a _____.

Accepted Answer

ring structure

Answer

star structure

Answer

linear structure

Answer

directory structure

Question 4

A code segment that misuses its environment is called ____.

Accepted Answer

a Trojan horse

Answer

a backdoor

Answer

a trap door

Answer

a worm

Question 5

In an access matrix, the ____ right allows a process to change the entries in a row.

Accepted Answer

control

Answer

owner

Answer

copy

Answer

switch

Question 6

Worms ____.

Accepted Answer

all of the above

Answer

use the spawn mechanism to ravage system performance

Answer

can shut down an entire network

Answer

continue to grow as the Internet expands

Question 7

The ____ implementation of an access table consists of sets of ordered triples.

Accepted Answer

global table

Answer

access list for objects

Answer

lock-key mechanism

Answer

capability list

Question 8

A denial of service attack is ____.

Accepted Answer

aimed at disrupting legitimate use of a system

Answer

aimed at gaining information

Answer

aimed at stealing resources

Answer

generally not network based

Question 9

In capability lists, each object has a ____ to denote its type.

Accepted Answer

tag

Answer

gate

Answer

key

Answer

lock

Question 10

In a paired-password system, ____.

Accepted Answer

the computer supplies one part of a password and the user enters the other part

Answer

the user specifies two passwords

Answer

passwords must contain equal amounts of numbers and digits paired together

Answer

two users must enter their own separate password to gain access to the system

Question 11

Which of the following implementations of the access matrix is a compromise between two other implementations listed below?

Accepted Answer

lock-key

Answer

access list

Answer

capability list

Answer

global table

Question 12

A ____ virus changes each time it is installed to avoid detection by antivirus software.

Accepted Answer

polymorphic

Answer

tunneling

Answer

multipartite

Answer

stealth

Question 13

In the reacquisition scheme for implementing the revocation of capabilities, ____.

Accepted Answer

capabilities are periodically deleted from each domain

Answer

a key is defined when the capability is created

Answer

the capabilities point indirectly, not directly, to the objects

Answer

a list of pointers is maintained with each object that points to all capabilities associated with that object

Question 14

____ is a symmetric stream cipher.

Accepted Answer

RC4

Answer

DES

Answer

AES

Answer

Twofish

Question 15

Which of the following is an advantage of compiler-based enforcement of access control?

Accepted Answer

Access privileges are closely related to the linguistic concept of a data type.

Answer

Protection schemes are programmed as opposed to simply declared.

Answer

Protection requirements are dependent of the facilities provided by a particular operating system.

Answer

The means for enforcement needs to be provided by the designer of the subsystem.

Question 16

A ____ is a public key digitally signed by a trusted party.

Accepted Answer

digital certificate

Answer

key ring

Answer

message digest

Answer

digital key

Question 17

Which of the following is a true statement regarding the relative merits between access rights enforcement based solely on a kernel, as opposed to enforcement provided largely by a compiler?

Accepted Answer

Enforcement by the kernel is less flexible than enforcement by the programming language for user-defined policy.

Answer

Enforcement by the compiler provides a greater degree of security.

Answer

Kernel-based enforcement has the advantage that static access enforcement can be verified off-line at compile time.

Answer

The fixed overhead of kernel calls cannot often be avoided in a compiler-based enforcement.

Question 18

____ layer security generally has been standardized on IPSec.

Accepted Answer

Network

Answer

Transport

Answer

Data-link

Answer

Application

Question 19

Which of the following is true of the Java programming language in relation to protection?

Accepted Answer

When a class is loaded, the JVM assigns the class to a protection domain that gives the permissions of that class.

Answer

It does not support the dynamic loading of untrusted classes over a network.

Answer

It does not support the execution of mutually distrusting classes within the same JVM.

Answer

Methods in the calling sequence are not responsible for requests to access a protected resource.

Question 20

Which of the following is true of SSL?

Accepted Answer

It is commonly used for secure communication on the Internet.

Answer

It provides security at the data-link layer.

Answer

It is a simple protocol with limited options.

Answer

It was designed by Microsoft.

Operating Systems for Programmers - Module 5 - Post-Quiz

Informationen

Feedback

Wie gefällt dir das neue Design?