estion(1) Which statement is the most correct with respect to defense in depth? Group of answer choices It is commonly used in network security architecture It is used in network, data and application security architecture. It enforces security only at physical, MAC and network layer of the OSI model It is implemented through multiple, concentric zone boundaries, Question(2) Which of the following tools are not used to enforce integrity of data in flight? Group of answer choices Tunnels Encryption Firewalls VPNs Question(3) Which security architecture design principle can be applied to a SaaS based application? Group of answer choices Compromise Recording Open Design Separation of Privilege Psychological Acceptabilit

estion(1) Which statement is the most correct with respect to defense in depth? Group of answer choices It is commonly used in network security architecture It is used in network, data and application security architecture. It enforces security only at physical, MAC and network layer of the OSI model It is implemented through multiple, concentric zone boundaries, Question(2) Which of the following tools are not used to enforce integrity of data in flight? Group of answer choices Tunnels Encryption Firewalls VPNs Question(3) Which security architecture design principle can be applied to a SaaS based application? Group of answer choices Compromise Recording Open Design Separation of Privilege Psychological Acceptabilit

Principles of Information Security (MindTap Course List)

6th Edition

ISBN:9781337102063

Author:Michael E. Whitman, Herbert J. Mattord

Publisher:Michael E. Whitman, Herbert J. Mattord

Chapter6: Security Technology: Access Controls, Firewalls, And Vpns

Section: Chapter Questions

Problem 2E

See similar textbooks

Similar questions

0.10 Layer 2 security best practices can mitigate the threat of MAC flooding ARP poisoning ARP flooding All responses None of the responses
The LAN Security Concepts gave you an overview on how vulnerabilities compromise LAN security and how to mitigate these threats. As such, IN YOUR OWN WORDS, answer the following questions provided below. Explain how AAA enforces the security for network administration. List down methods on how to mitigate Ransomware Attacks.
Question 4 Answer the following questions regarding network security.Q.4.1 Read the statement below and then answer the question that follows.Statement:Using proxy servers has several advantages, including increased speed,reduced costs, improved management and stronger security.Evaluate the statement above by commenting critically on each claim made in thestatement.Q.4.2 Rewrite the SaaS, PaaS and IaaS acronyms in full. State at least one securityconcern associated with any one of these models.NB: Only one security concern required for any one model.
2. Layer 2 security best practices include: Disable unused network device ports Disable CDP Implement port security Implement 802.1X All responses 3. Actions to minimize network attack surfaces and attack vectors could include Defense in depth practices De-militarized zones for public facing system services Control inbound and outbound network access via firewalls All available answers
Principles of Information Security Multiple choices Q :TSL (Transport Layer Security) is a cryptographic protocol used for securing HTTP and HTTPS based connection.Required to answer. Single choice. A. I agree that it is used for securing HTTP and HTTPSB. I disagree because SSL is used for securing HTTP and HTTPSC. I disagree because it is used for securing HTTP onlyD. I disagree because it is used for securing HTTPS only
The LAN Security Concepts gave you an overview on how vulnerabilities compromise LAN security and how to mitigate these threats. As such, IN YOUR OWN WORDS, answer the following questions provided below. Discuss the reasons of securing Layer 2 network. Discuss the security features that are offered by ESA, WSA and NAC.
Make sure to look at the protocols currently in use while you're evaluating the internet. An effective security strategy is one that focuses on the aim and metrics that are relevant to the target audience's position and resources. "Why is that?" is one of the most commonly asked questions when it comes to port management.
The network address for an organisation’s network is 54.33.112.0/23. Provide the subset of the filter table for a stateless firewall that includes the following rules: - Allows all internal users to establish HTTP with any external hosts but blocks FTP. - Allows external users to browse the company web page at 54.33.112.4 - Allow incoming TELNET requests to all organisation hosts apart from those in subnet 54.33.112.0/24 THIS IS ALL INFORMATION PROVIDED PLEASE My last question about has not been responded correctly, please you must provide the subset of the filter table for a stateless firewall that includes the following rules.
A. “Security is different in wireless” Discuss the statement above. The answer needs to take into account all aspects of the debate. Provide example if. Support your answer with reference. B. In IEEE 802.11, open system authentication simply consists of two communications. An authentication is requested by the client, which contains the station ID (typically the MAC address). This is followed by an authentication response from the AP/router containing a success or failure message. An example of when a failure may occur is if the client’s MAC address is explicitly excluded in the AP/router configuration. What are the benefits of this authentication scheme? What are the security vulnerabilities of this authentication scheme?
This question is about firewalls and firewall rules. a) Explain the difference between a packet filtering firewall and bastion host and how the two can be used in combination. b) Explain TWO issues with the firewall configuration shown below. c) Explain how to fix both issues. You must provide both, the fixed ruleset (no html table required, text is sufficient) and a rationale for the fixes
2.Should old or unpatched computers be allowed on a LAN? 3.Shutting down unneeded ports and services is an essential and very basic part of computer security because every port open (and every service running) is a possible avenue for a hacker or virus. What is the rule to shut down unneeded ports and services and how to do it properly? 4.Why should network administrators not simply throw old backup media away? 5.Discuss the concept of Demilitarized Zone (DMZ).
Please answer all the three chossing questions. Thank you in Advance. 22) ___________________An Inline IDS can also terminate or restart other processes on the system. Answer : True or False 23) Which of the following is not the component of a passive IDS. a) Analysis Engine b) Traffic Collector(Sensor) c) Signature Database d) Protocol Analyzer 24) Which of the following is true about Protocol Analyzer from the Network Administration perspective: a) Anylyzing security problem b) Detect misconfigured/misbehaveing applications c) Gathering and reporting networj usage d) Debugging client/server communication