1.1 EXPLORE OPERATING SYSTEM CONCEPTS

CompTIA CySA+ CS0-003 Study Guide

1. Security Operations

System Hardening

Overview of System Hardening

  • Q: What is system hardening in cybersecurity?
    A: System hardening is the process of securing an operating system, application, or device by reducing vulnerabilities and limiting potential attack vectors.

  • Q: What are the key strategies used in system hardening?
    A: Disabling unnecessary services, enforcing strict access controls, applying security patches, implementing the principle of least privilege, and configuring secure system settings.

  • Q: What frameworks provide best practices for system hardening?
    A: The Department of Defense Security Technical Implementation Guides (DoD STIGs) and the Center for Internet Security (CIS) Benchmarks offer detailed guidelines for securing systems.

Windows Registry and File System Security

  • Q: What role does the Windows Registry play in system security?
    A: The Windows Registry is a centralized database that stores system, device, and application configurations. If not properly managed, it can become a key target for security threats.

  • Q: What are the main root keys in the Windows Registry, and what do they control?
    A:

    • HKEY_LOCAL_MACHINE (HKLM): Manages system-wide settings.

    • HKEY_USERS: Handles configurations for all user accounts.

    • HKEY_CLASSES_ROOT: Defines file type associations and linking mechanisms.

    • HKEY_CURRENT_CONFIG: Stores runtime configuration settings.

    • HKEY_CURRENT_USER: Contains settings specific to the active user.

  • Q: What are registry hives, and where are they stored?
    A: Registry hives are binary files that store registry data. Key hives include SAM, SECURITY, SOFTWARE, SYSTEM, and DEFAULT, all found in C:\Windows\System32\Config.

Configuration File Security in Linux and Windows

  • Q: How does Linux handle configuration settings differently from Windows?
    A: Unlike Windows, which uses the registry, Linux stores configuration settings in plaintext files, primarily within /etc/, though they can also be found in /usr, /opt, and /var.

  • Q: What are common formats for configuration files?
    A:

    • INI: Uses key-value pairs for configuration settings.

    • XML: Employs a hierarchical tag-based structure, often used for APIs.

    • YAML: Uses indentation-based formatting, common in system configurations.

    • JSON: A lightweight format used in web applications and API data exchanges.

System Processes and Security

  • Q: Why are system processes important for security?
    A: System processes manage critical background tasks, such as resource allocation, security enforcement, and application execution, making them essential for system stability and security.

  • Q: What are examples of security-related system processes?
    A:

    • Antivirus scanning processes to detect and remove threats.

    • Disk management processes for optimizing system performance and integrity.

    • Authentication services for enforcing user access control.

    • Software update processes to apply security patches and maintain system integrity.

Hardware Architecture and Security Considerations

  • Q: How does hardware architecture impact cybersecurity?
    A: Hardware architecture affects system performance, scalability, and security risks. Different computing environments require tailored security measures to mitigate potential threats.

  • Q: What are the key differences between x86 and ARM architectures?
    A:

    • x86 Architecture: Commonly found in desktops, laptops, and servers, providing high performance and broad software compatibility.

    • ARM Architecture: Used in mobile devices, IoT applications, and energy-efficient systems, often requiring specialized security controls.

  • Q: Can software designed for one hardware architecture run on another?
    A: No, software must be compiled specifically for its target architecture unless an emulator or compatibility layer is used.