Deck 9: Embedded Operating Systems: The Hidden Threat

Question 1

Embedded Linux is an example of a(n) ____ OS used in a multitude of industrial, medical, and consumer items.

A)monolithic
B)macrolithic
C)microkernel
D)macrokernel

Answer 1

A

Question 2

A(n) ____ operating system can be a small program developed specifically for use with embedded systems, or it can be a stripped-down version of an OS commonly used on general-purpose computers.

A)multi-threaded
B)embedded
C)GUI
D)SMP

Answer 2

B

Question 3

The ____ worm spread by exploiting outdated or poorly configured router OSs that contained easy-to-guess passwords.

A)SQL Slammer
B)psyb0t
C)Melissa
D)Nimda

Answer 3

B

Question 4

Embedded OSs are usually designed to be small and efficient, so they don't have some of the functions that general-purpose OSs have.

Question 5

What is the collective name for embedded versions of Windows Enterprise OSs, such as XP Professional, Windows Vista Business and Ultimate, and Windows 7 Ultimate and Professional?

A)Windows Business Suites
B)Embedded Systems Suite
C)Embedded Windows Servers
D)Windows Embedded Enterprise

Question 6

One type of specialized embedded OS is a(n) ____, typically used in devices such as programmable thermostats, appliance controls, and even spacecraft.

A)RTOS
B)VoP
C)MILS
D)SCADA

Question 7

Both general-purpose and embedded OSs use drivers to interface with hardware devices.

Question 8

Which of the following could be considered the biggest security threat for an organization?

A)spyware
B)employees
C)kernels
D)routers

Question 9

One reason that some vendors of embedded OSs are using ____ software more is that the cost of developing and patching an OS is shared by the entire community.

A)closed-source
B)shared
C)reused
D)open-source

Question 10

An embedded OS certified to run multiple levels of classification (such as unclassified, secret, and top secret) on the same CPU without leakage between levels is called ____.

A)MILS
B)RTOS
C)GUI
D)DOS

Question 11

Many viruses, worms, Trojans, and other attack vectors take advantage of ____code.

A)shortened
B)shared
C)modified
D)cache

Question 12

For sensitive embedded systems that need only a fraction of the features offered by other kernels, the risk of vulnerabilities might outweigh the benefits, and a(n) ____ kernel might be most suitable.

A)micro
B)proprietary
C)monolithic
D)macro

Question 13

OSs that use a(n) ____ sacrifice flexibility for simplicity and fewer hardware resources.

A)macrokernel
B)microkernel
C)monolithic kernel
D)bilithic kernel

Question 14

Which of the following is a software flaw that would cause the system to suddenly stop or fail when the clock struck midnight on the eve of the past millennium?

A)Conficker worm
B)Y2K
C)psyb0t
D)BIOS-based rootkit

Question 15

Attackers cannot map an entire network from a single router.

Question 16

Software residing on a chip is commonly referred to as ____.

A)middleware
B)testware
C)firmware
D)microware

Question 17

Wind River produces an open-source Linux OS for embedded systems and an OS microkernel extension called ____.

A)RTEMS
B)QNX
C)VxWorks
D)RTLinux

Question 18

Firmware rootkits are hard to detect because the code for firmware often isn't checked for possible corruption.

Question 19

Windows Embedded Standard is essentially Windows CE on a diet.

Question 20

The ____ Linux kernel was designed to offer the most flexibility and support for sophisticated features.

A)macrolithic
B)monolithic
C)bilithic
D)proprietary

Question 21

If a(n) ____ is compromised, attackers might be able to gain complete access to network resources.

A)host
B)router
C)driver
D)rootkit

Question 22

MATCHING
Match each term with the correct statement below.
a.Windows Embedded Standard
f.embedded operating system
b.Green Hill Software
g.Quebec
c.RTLinux
h.QNX
d.VxWorks
i.SCADA
e.RTEMS
commercial RTOS used in Cisco's routers and Logitech universal remotes

Question 23

MATCHING
Match each term with the correct statement below.
a.Windows Embedded Standard
f.embedded operating system
b.Green Hill Software
g.Quebec
c.RTLinux
h.QNX
d.VxWorks
i.SCADA
e.RTEMS
designed an embedded OS for the F-35 Joint Strike Fighter

Question 24

A device that performs more than one function (e.g., printing and faxing) is called a(n) ____.

A)MILS
B)ASA
C)RTOS
D)MFD

Question 25

Disgruntled employees might install a(n) ____ in company computers' flash memory before they leave a company and later use it to gain access to the corporate network.

A)BIOS-based rootkit
B)embedded browser
C)unclassified kernel
D)patch

Question 26

MATCHING
Match each term with the correct statement below.
a.Windows Embedded Standard
f.embedded operating system
b.Green Hill Software
g.Quebec
c.RTLinux
h.QNX
d.VxWorks
i.SCADA
e.RTEMS
slimmed down version of Windows XP

Question 27

MATCHING
Match each term with the correct statement below.
a.Windows Embedded Standard
f.embedded operating system
b.Green Hill Software
g.Quebec
c.RTLinux
h.QNX
d.VxWorks
i.SCADA
e.RTEMS
newest version of Windows Embedded Standard

Question 28

MATCHING
Match each term with the correct statement below.
a.Windows Embedded Standard
f.embedded operating system
b.Green Hill Software
g.Quebec
c.RTLinux
h.QNX
d.VxWorks
i.SCADA
e.RTEMS
widely used embedded OS developed by Wind River Systems

Question 29

MATCHING
Match each term with the correct statement below.
a.Windows Embedded Standard
f.embedded operating system
b.Green Hill Software
g.Quebec
c.RTLinux
h.QNX
d.VxWorks
i.SCADA
e.RTEMS
an operating system that runs in an embedded system

Question 30

Restricting network access to only the ___________________________________ that need to communicate with embedded systems is one way to reduce the potential of vulnerabilities.

Question 31

Embedded systems include their own operating system, called a(n) "_________________________".

Question 32

A common vulnerability with routers and other networking devices is the _________________________ vulnerability.

Question 33

Originally, ____ were used to perform routing and switching.

A)networking devices
B)general purpose computers
C)embedded systems
D)specialized hardware

Question 34

MATCHING
Match each term with the correct statement below.
a.Windows Embedded Standard
f.embedded operating system
b.Green Hill Software
g.Quebec
c.RTLinux
h.QNX
d.VxWorks
i.SCADA
e.RTEMS
open-source Linux OS for embedded systems and an OS microkernel extensions

Question 35

A(n) ____ system may be used when automation is critical.

A)CAD
B)GUI
C)SCADA
D)VoIP

Question 36

The Quebec version of Windows Embedded Standard is based on ____________________.

Question 37

MATCHING
Match each term with the correct statement below.
a.Windows Embedded Standard
f.embedded operating system
b.Green Hill Software
g.Quebec
c.RTLinux
h.QNX
d.VxWorks
i.SCADA
e.RTEMS
used for equipment monitoring in large industries

Question 38

MATCHING
Match each term with the correct statement below.
a.Windows Embedded Standard
f.embedded operating system
b.Green Hill Software
g.Quebec
c.RTLinux
h.QNX
d.VxWorks
i.SCADA
e.RTEMS
open-source embedded OS used in space systems

Question 39

Rootkits that pose the biggest threat to any OS are those that infect a device's ____.

A)firmware
B)testware
C)middleware
D)fireware

Question 40

QNX, from QNX Software Systems, is a commercial ________________________________________.

Question 41

Why do many people dismiss the topic of embedded device security?

Question 42

List at least four best practices for protecting embedded OSs.

Question 43

Why might attackers use social engineering techniques to masquerade as support technicians?

Question 44

Explain the BIOS-level rootkit, called SubVirt, developed by Microsoft and the University of Michigan.

Question 45

What principle can be used to help reduce insider threats to an organization?

Question 46

What types of systems use VxWorks?

Question 47

What types of embedded systems are found in a typical corporate building?

Question 48

What did the botnet worm psyb0t (or the Network Bluepill) target?

Question 49

Heart rate monitors and MRI machines are systems that run embedded Windows OSs. Why are there problems with patching them?

Question 50

Many hackers today want more than just notoriety. What are they looking for and how do they accomplish it?