Chapter 9 Homework Questions & Answers

Chapter 9 Homework Questions & Answers Which of the following can be a small program developed specifically for use with embedded systems, or a stripped-down version of an OS commonly used on general-purpose computers? Embedded OS Which of the following best describes software that resides on a chip? Firmware Previous Play Next Rewind 10 seconds Move forward 10 seconds Unmute 0:01 / 0:15 Full screen Brainpower Read More To increase the impact a single vulnerability can have viruses, worms, Trojans, and other attack vectors take advantage of which of the following? Shared code What type of embedded OS is certified to run multiple levels of classification, such as unclassified, secret, and top secret, on the same CPU without leakage between levels? MILS What type of operating system sacrifices flexibility for simplicity and fewer hardware resources? Microkernel If you are concerned about the attack surface a system presents, what type of embedded OS configuration would you NOT use? Multiple embedded Which of the following is usually considered the biggest security threat to an organization? Employees Which of the following is a software flaw that would cause billions of embedded systems to suddenly stop or fail when the clock struck midnight on the eve of the past millennium? Y2K What type of kernel was designed to offer the most flexibility and support for sophisticated features? monolithic When designing sensitive embedded systems that need only a fraction of the features offered by other kernels, there are risks for vulnerabilities that might outweigh the benefits. What type of kernel should be chosen for this system? proprietary Originally, which of the following was used to perform routing and switching before specialized hardware was developed? General purpose computers A device that performs more than one function, such as printing and faxing is called which of the following? MFD Which of the following systems should be used for equipment monitoring and when automation is critical? SCADA Rootkits that pose the biggest threat to any OS are those that infect what part of the targeted device? firmware What type of malicious code could survive an OS reinstall to allow an attacker to access the system at a later date? BIOS-based rootkit SCADA systems controlling critical infrastructure are usually completely separated from the Internet by which of the following? air gap What type of viruses and code has been created by security researchers and attackers that could infect phones running Google's Android, Windows Mobile, and the Apple iPhone OS? Java Which of the following is often found within an embedded OS that can cause a potential vulnerability to an attack? Web server Which of the following source code is now available to the public and was considered a trimmed down version of the Windows desktop OS? Windows CE Which of the following is not a best practice for protecting embedded OS's? Scan