Exam (elaborations)
GICSP Book 410.5 ICS Security Governance.
- Course
- Institution
GICSP Book 410.5 ICS Security Governance.
[Show more]
Seller
Follow
ACADEMICAIDSTORE
Reviews received
Content preview
GICSP Book 410.5 ICS SecurityGovernance.
What OS is common in ICS Workstations?
Windows
What OS is common among ICS Servers?
Linux/Unix
What was the design philosophy for Windows?
Single user platform grown into a server OS
What was the design philosophy for Unix?
Multi-process and multi-user that grew into a desktop platform
What was the design philosophy for Linux?
Grew out of unix, with a different kernel but similar user interface & SW
What are the three key elements of Linux/Unix OSs
Hardware - Collection of components that house our data and provide means to communicate
Kernel - Memory resident part of the OS
Shell - Portion of OS that users and processes interact directly
Why is the kernel of importance to attackers?
It is first thing loaded into memory at bootup
What does the /dev directory contain?
Special device files used to communicate with the physical hardware devices controlled by the OS
What does the /usr directory contain?
Critical components of the OS live, such as sys binaries, programming libs and tools, and online
documentation
What does the /var directory contain?
Home of frequently-changing data, such as log files/temp queues for sys services
What are three benefits to partitioning disk space?
1. Disk space exhaustion can be prevented
2. Makes backups easier
3. allows security admin to set different security options on different parts of the Filesystem
What is the df command and what does it show?
, disk free command that helps admins find partitions who were running out of disk space.
What is the chroot() command?
App isolation feature that must be enabled on an app by app basis and basically doesnt let the app
"see: any of the filesystems outside of the directory that chroot() was invoked on
What is the security advantage to chroot()?
If a vuln is discovered and exploited in the app, then the attacker can only access the parts of the
filesystem where the app chroot()ed itself.
What are the steps to hardening linux>
Disable unused services
follow distro sec guidance
Run Lynis and address findings
Consider other free/paid 3rd party sec sw
configure iptables/iftables
Automate extra needed configs
What are "services" in linux & Unix typically called?
Daemons
What does the linux system look for immediately after boot?
init daemons that provides the most fundamental layer of goodness that goes between the kernel
and the user
What are the two types of inits
SysV
BSD
How does System V's init start daemons?
based on runlevel:
0 - shutdown/halt
1 - Single user/recovery mode
2-5 - varies by distro
6 - reboot
How does systemd start daemons?
Based on system state's "target" such as:
poweroff.target
emergency.target
rescue.target
What is Lynis?
A way to harden linux OS's by auditing a system, identifying weak settings with links to descriptions
on their website, and potentially a central mgmt sys
What is Bastille Linux?
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller ACADEMICAIDSTORE. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $12.49. You're not tied to anything after your purchase.
Can Stuvia be trusted?
4.6 stars on Google & Trustpilot (+1000 reviews)
67096 documents were sold in the last 30 days
Founded in 2010, the go-to place to buy study notes for 14 years now