IS3230 Final Exam Answers

* Check existing security scan reports, from WireShark and NetWitness Investigator, and see if we can identify data leakage, and setup new policies and procedures for monitoring web servers and applications.

Claudio is okay with that because he can fill out the form without help. However, when he gets to the blank that says “Middle Name” he doesn’t know what to do. Claudio doesn’t have a middle name. When he asks a paralegal at the ABC Legal Clinic what to do with this blank, the paralegal

Question 12.12. (TCO 10) A company wants to assure customers that their online transactions are secure. Given this

Q4: What are the 5 of authentications available? List them form least secure to most secure, while designing SQL Server’s Object level security? You are also required to fill in the classification field in the following table based on the security topology of Active directory running on a SQL server.

(TCO 6, 7) The local newspaper reports that a middle school had been broken into, damaged, and vandalized to the tune of $50,000. Security cameras show the vandals were four high school students, three of whom are on the honor roll. Compare and contrast the explanation given by labeling theory to the explanation given by anomie theory of deviance.

30. What is the process of confirming a user’s identity by using a known value, such as a password, pin number on a smart card, or user’s fingerprint or handprint in the case of biometric authentication? Authentication

C. Permissions and Rights (What they can do. . Which operations they can perform on a system.)

Besides the basic physical security of a site, the next most important aspect is controlling digital access into and out of the organization’s network. In most cases this means controlling the points of connectivity to the outside world, typically the Internet. Partitioning the boundary between the outside Internet and the internal intranet is a critical security piece. Any services not actually needed should be turned off so that they will not become avenues of attack for security threats. Different systems will have different services running by default.

3. NTLM- This kind of authentication protocol is used on networks that uses systems running on Windows OS and stand-alone systems like Windows 95, 98.

Biometrics is a method of identifying an individual based on characteristics that they possess, typically physiological features such as a fingerprint, hand, iris, retina, face, voice, and even DNA. Some methods of biometrics security even use multiple physiological features or multimodal biometrics to provide superior security than a single form of biometrics can provide. Why are biometrics important in the field of information security? Biometrics provide a remarkable amount of security for information because biometrics are unique to each person, and thus cannot be lost, copied, or shared with another individual. This security allows for biometrics to provide a means to reliability authenticate personnel. The importance of biometrics can be further divided into the history of biometrics and why it was devised, past implementations of biometrics, current implementations of biometrics, and future implementations of biometrics.

4.p8 Need to know the Confidence in any authentication system can be measured by two components : the type of correlation and the number of authentication factors

Miller Inc. which is in the business of providing data collection and analytics services relies majorly on network security to keep its competitive advantage. This is because the customers that rely on the company's system trust that since there are sufficient security measures that have been ensured, they can store their data securely. Each of the functional models of the system should have sufficient security measures to ensure that complete security of the whole system architecture is achieved. The three functional modules are the backend module, services or operation module and customer access module. The major relationship between infrastructure and security comes in the role they play to ensure that the end user gets the data that they need when they need it and in the best way possible. Therefore for the three modules, there is a need to balance security with the right infrastructure.

This research is aimed at conducting a comparative study of the different access control models and report on them. The prescribed text mentions Role Based Access Control in chapter 5 but does not give details on this model and does not provide information on the other access control models. Hence this report seeks to explain the different access control models and compare them based on an analysis of academic literature.

* Bell-la padula: focuses on the confidentiality of data and the control of access to classified information. Parts of system are divide into sub and object, current condition of sys is described as its state

there is a system implemented to verify the credentials of EU Institution staff and visitors by a visual check of a badge by a member of security staff or with a card reader,