100% satisfaction guarantee Immediately available after payment Both online and in PDF No strings attached
logo-home
GICSP Book 410.5 ICS Security Governance. $12.49   Add to cart

Exam (elaborations)

GICSP Book 410.5 ICS Security Governance.

 2 views  0 purchase
  • Course
  • Institution

GICSP Book 410.5 ICS Security Governance.

Preview 2 out of 13  pages

  • November 3, 2024
  • 13
  • 2024/2025
  • Exam (elaborations)
  • Questions & answers
avatar-seller
GICSP Book 410.5 ICS Security
Governance.
What OS is common in ICS Workstations?

Windows

What OS is common among ICS Servers?

Linux/Unix

What was the design philosophy for Windows?

Single user platform grown into a server OS

What was the design philosophy for Unix?

Multi-process and multi-user that grew into a desktop platform

What was the design philosophy for Linux?

Grew out of unix, with a different kernel but similar user interface & SW

What are the three key elements of Linux/Unix OSs

Hardware - Collection of components that house our data and provide means to communicate

Kernel - Memory resident part of the OS

Shell - Portion of OS that users and processes interact directly

Why is the kernel of importance to attackers?

It is first thing loaded into memory at bootup

What does the /dev directory contain?

Special device files used to communicate with the physical hardware devices controlled by the OS

What does the /usr directory contain?

Critical components of the OS live, such as sys binaries, programming libs and tools, and online
documentation

What does the /var directory contain?

Home of frequently-changing data, such as log files/temp queues for sys services

What are three benefits to partitioning disk space?

1. Disk space exhaustion can be prevented
2. Makes backups easier
3. allows security admin to set different security options on different parts of the Filesystem

What is the df command and what does it show?

, disk free command that helps admins find partitions who were running out of disk space.

What is the chroot() command?

App isolation feature that must be enabled on an app by app basis and basically doesnt let the app
"see: any of the filesystems outside of the directory that chroot() was invoked on

What is the security advantage to chroot()?

If a vuln is discovered and exploited in the app, then the attacker can only access the parts of the
filesystem where the app chroot()ed itself.

What are the steps to hardening linux>

Disable unused services
follow distro sec guidance
Run Lynis and address findings
Consider other free/paid 3rd party sec sw
configure iptables/iftables
Automate extra needed configs

What are "services" in linux & Unix typically called?

Daemons

What does the linux system look for immediately after boot?

init daemons that provides the most fundamental layer of goodness that goes between the kernel
and the user

What are the two types of inits

SysV
BSD

How does System V's init start daemons?

based on runlevel:
0 - shutdown/halt
1 - Single user/recovery mode
2-5 - varies by distro
6 - reboot

How does systemd start daemons?

Based on system state's "target" such as:
poweroff.target
emergency.target
rescue.target

What is Lynis?

A way to harden linux OS's by auditing a system, identifying weak settings with links to descriptions
on their website, and potentially a central mgmt sys

What is Bastille Linux?

The benefits of buying summaries with Stuvia:

Guaranteed quality through customer reviews

Guaranteed quality through customer reviews

Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.

Quick and easy check-out

Quick and easy check-out

You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.

Focus on what matters

Focus on what matters

Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!

Frequently asked questions

What do I get when I buy this document?

You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.

Satisfaction guarantee: how does it work?

Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.

Who am I buying these notes from?

Stuvia is a marketplace, so you are not buying this document from us, but from seller ACADEMICAIDSTORE. Stuvia facilitates payment to the seller.

Will I be stuck with a subscription?

No, you only buy these notes for $12.49. You're not tied to anything after your purchase.

Can Stuvia be trusted?

4.6 stars on Google & Trustpilot (+1000 reviews)

62890 documents were sold in the last 30 days

Founded in 2010, the go-to place to buy study notes for 14 years now

Start selling
$12.49
  • (0)
  Add to cart