Final: Security and Network

Networking is part of our everyday lives now. Weather is us using our phones, computer, using GPS for directions, watching 3D movies and TV’s or in our work environments. Network Security has become search a big issue since our day to day live started to be more involve with us. These problems involve in all type of shapes and forms where some of these issues are cyber attacks, physical attacks, or abuse of policies. People are really exposed due to the amount of internet activities we have going on in most of our networks. There are two fundamentally different when it comes to networking, the data networks and the synchronous network comprised of switches. With that being said there are also

Three examinations will be administered. The exams will consist of multiple choice questions and problems. Problems will be similar to those covered in class or those given as homework assignments.

- Complete all of the details required on the front page of the examination booklet. - Make sure that you note the SIX(6) questions attempted on the front of your examination booklet - If Seven questions are attempted, the first SIX(6) will be marked. - You may use a non-programmable calculator - Graph paper will be provided. - Answers are to be written in ink. Pencils are permitted for graphing purposes. - The

Discuss security standards and methods, including the need for data storage integrity and data backup and recovery. In addition to complying with Health Insurance Portability and Accountability Act (HIPPA), SMC needs to be valiant in how the organization will protect information and manage network security. Information security is the protection of information against risk to its integrity, inadvertent disclosure, or availability (Hawkins, 2013a). The most common threats an organization's network will face are hackers, spyware, viruses, worms, Trojan horses, and malicious insider (Hawkins, 2013a). To protect SMC from hackers, they will use firewalls and intrusion-detection devices. Firewalls protect network systems by obstructing unauthorized entry while allowing approved communications (Hawkins, 2013a). Intrusion-detection systems monitor who the user is and what the user accesses. To promote HIPPA, SMC will track the last names of users who accessed patients with the same last name to reveal inappropriate use of client information.

Answer the following questions based on lecture materials and any outside resources. Be complete and concise. Use complete sentences and write answers in your own words. Use diagrams where helpful to answer the question, but also describe any diagrams in complete sentences. 50 pts total.

Directions:  Answer each question in a paragraph—be sure to give specific details and examples.  Remember that each of these questions has multiple parts to it.  You must type your responses out and hand it to me by the end of our class period.

Section A: Answer all questions. Total 42 points – each question in this section carries 3.5 points. Write the responses to ALL questions in your answer sheet.

The test is worth 20 points and will be graded accordingly: Multiple Choice = 20%, True/False = 20%, Matching = 10%, and Short Answer = 50%. I will have the grades posted within 7 days.

The early version of the worm functioned as a man-in-the-middle attack. It sat between the engineering software and the Siemens controllers for the input and output valves feeding into each centrifuge. The worm would accept commands from the engineering software and give false responses to indicate that these commands were being processed by the controllers. In reality, the worm was regularly allowing the centrifuges to be over-pressurized, which had the effect of causing the centrifuges to wear out and break more quickly. The later version of the software was much more crude. It would take over the centrifuges and refuse to acknowledge signals from the engineering software while an attack was active. The attack operated about once a month and worked by slowing down the centrifuges and then spinning them back up to past their normal full speed. This would cause damage as the centrifuges passed through what was known as a resonance speed, which would destabilize the rotor. Stuxnet managed to increase the rotor speeds at Iran’s Natanz nuclear facility from a normal speed of 63,000 rpm to 84,600 rpm. The worms were carefully designed so that it would not be obvious to someone in the facility that their mechanical systems were being sabotaged. For example, the worm would randomly affect different centrifuges at

This exam has 5 short questions and would be 30% of your final examination grade.

Note: The following six questions are weighted equally; each will count as one-sixth of your overall test grade.

This quiz consist of 20 multiple choice questions and covers the material in chapters 1 through 4. There are five questions from each chapter. Be sure you are in the correct Chapter when you take the quiz.

What is the risk impact or risk factor (critical, major, minor) that you would qualitatively assign to the risks, threats, and vulnerabilities you identified for the LAN-to-WAN Domain for the healthcare and HIPPA compliance scenario?

Network security has changed significantly over the past years. There is more and more data to monitor and analyze in order to detect the activity of your data and systems. Securing a network has many variables. Password authentication, network access, patches, anti-virus protection, intrusion detection, firewall and network monitoring tools are just a few of the things you can do to protect yourself.

This final exam will use multiple choice questions. You will be required to answer 100-