Essay on IS3230 Final Exam Answers II

* Check existing security scan reports, from WireShark and NetWitness Investigator, and see if we can identify data leakage, and setup new policies and procedures for monitoring web servers and applications.

Improper ethical decisions may be the cause of the failure, and as relate to my three behaviors for personal "code of ethics".

ID Name of asset Owner Description of Asset Asset Type Data Type Retention Risks / impact Key asset 01 Personal Computers Staffs Each particular employee used their own PC for their works. Hardware Personal 1.5 year Availability Yes 02 Laptops Head of IT The device could be handled by many peoples Hardware Personal 1.5year Availability

internal and external users to whom access to the organization’s network, data or other sensitive

Cisco. (n.d.). (Cicso) Retrieved 10 26, 2014, from Cisco ASA 5500-X Series Next-Generation Firewalls: http://www.cisco.com/c/en/us/products/security/asa-5500-series-next-generation-firewalls/index.html

Which of the following has the ultimate and final responsibility for network security in an organization?

|a |3.2 |Security Strategies in Windows Platforms and Applications, Page 68 | |13. |b |3.3 |Security Strategies in Windows Platforms and Applications, Page 80 | |14. |c |3.4 |Security Strategies in Windows Platforms and Applications, Page 83 | |15. |d |3.5 |Security Strategies in Windows Platforms and Applications, Page 83 | |16. |b |4.1 |Security Strategies in Windows Platforms and Applications, Page 90 | |17.

6. Describe (in plain English) at least one type of rule set you would want to add to a high level security network and why?

mandatory and discretionary access control policies. ACM Transactions on Information and System Security, Vol. 3, No. 2.

6. Describe (in plain English) at least one type of ruleset you would want to add to a high level security network and why?

1. (TCO A) The relationship between speed of innovation and product obsolescence is (Points : 5)

2. With the possibility of three business computers in his home, and all of his business records possibly vulnerable, this would be a good time to advise Bill on how to set up a routine plan to protect and defend his new network. Provide a list of the five most important concerns for safety and security of the network and the computers in the network. For each concern, specify the action to be taken, and if applicable, what software you recommend be added to the system. Justify each of your recommendations.

ANSWER THE 4 QUESTIONS ON THE FOLLOWING PAGES. BEFORE REVIEWING THE QUESTIONS, PLEASE BE AWARE OF THE FOLLOWING ISSUES--

In general, there are four areas that need to be considered for the end-user of this

Security controls for the network system involves the creation of access and use for each user or user group. The control is used to "restrict a list of possible actions down to the allowed actions. For example, encryption can be used to restrict access to data, application controls to restrict processing via authentication, and DRM storage to prevent unauthorized accesses." (Securosis, 2012) The necessary controls are determined by "first listing out