Question 1 You have recently been offered an intern position in your tertiary instution as a junior Computer Lab supervisor. Your manager wants you to take a leading role in managing the computer lab, in particular, security data, applications and the network. Your manager requested you to explain the categories of attackers to everyone that will be attending the next staff meeting. In preparation of this, answer the following questions: Q.1.1 Using the Computer Lab scenario above, provide one example of an attack that each of the attackers (A – C below) could use to attack/compromise the computer lab data, applications, or network security. Attacker Type Example A. Hackavists B. Script kiddies C. Insiders Q.1.2 Describe how you would use any two security principles to defend against any of the attacks you mentioned in Q.1.1 above. Q.1.3 For the following concept, provide a definition and a suitable example. Include the information security implication as well in your answer. • Thwarting identity theft.

Question 1 You have recently been offered an intern position in your tertiary instution as a junior Computer Lab supervisor. Your manager wants you to take a leading role in managing the computer lab, in particular, security data, applications and the network. Your manager requested you to explain the categories of attackers to everyone that will be attending the next staff meeting. In preparation of this, answer the following questions: Q.1.1 Using the Computer Lab scenario above, provide one example of an attack that each of the attackers (A – C below) could use to attack/compromise the computer lab data, applications, or network security. Attacker Type Example A. Hackavists B. Script kiddies C. Insiders Q.1.2 Describe how you would use any two security principles to defend against any of the attacks you mentioned in Q.1.1 above. Q.1.3 For the following concept, provide a definition and a suitable example. Include the information security implication as well in your answer. • Thwarting identity theft.

MIS

9th Edition

ISBN:9781337681919

Author:BIDGOLI

Publisher:BIDGOLI

Chapter5: Protecting Information Resources

Section: Chapter Questions

Problem 1P

See similar textbooks

Similar questions

Assuming that we had to place our current Yoga application into production, with the addition of the firewall we installed identity three(3) significant and distinct areas for which our application and its environment is still vulnerable, and list some possible ways we would need to protect those vulnerabilities? Be sure to be specific, thorough, and use critical thinking. Imagine this is for your boos, and your job depends on it, but keep it limited to just three paragraphs. Each paragraph should clearly list a vulnerability and at least one mitigation for each. Expected length: 3 well-formed but concise paragraphs.
Assuming you have been employed to lead a cyber security consultant for a company that performs penetration testing and advice businesses from the report on how to avoid cyber-attacks, use the knowledge you have acquired in performing the following task on two different websites. Using vega software, perform a vulnerability assessment of site 1 and site 2 listed below. It is the same site that can be accessed via http and HTTPS. Site 1 : http://team.critacghana.com Site 2: https://team.critacghana.com Discuss the High, Medium, and Low Risks results obtained from the reports generated by Vega. Present technical solutions to a non-technical audience in industry-standard format concepts based on your findings. Provide five recommendations for five critical risks identified out of the scanning. The connection with the HTTPS is encrypted using TLS_AES_256_GCM-SHA384, 256-bit keys, TLS 1.3. Discuss four advantages of using TLS 1.3. Discuss three importance of performing Ethical hacking.…
The network of an entertainment company was hacked by a hactivist through a backdoor attack that lasted for two (2) minutes. Do you think there was a lack of cybersecurity risk management in the company? Why do you think so? What are the possible preventive measures that the company should have done prior to the attack? What are some possible impacts of the attack to the entertainment company?
Answer the given question with a proper explanation and step-by-step solution. In this week's lecture, we are looking at the SANS CISO Mind Map and how we focused on Security Operations. Pick one of the items (for example - - Data Loss Prevention (DLP), VPN, Security Gateway, etc.) and research the topic and provide a two-paragraph minimum with references on the topic. Pick something you are interested in or do not know but would like to learn more about the topic. Sell me, make me excited.
Assume that you are the team member in STM Company. You are asked to outline a security policy for The STM. In your answer you need to explain first the policy concept, then the CIA triad that must be followed for make the policy. Afterward, the policy must mention the approved staff (how are allowed to read modify the data), the conditions of password creations, how STM employee will login in STM company, the changes that done in the firewall, how to measure the data breaches in data, and the physical security. I need the best solution in information security please
Q(3) Hi there, Please answer all the five multiple choice questions. No written explanation needed for all the questions. Thank you in advance. 11] It is important to staff who use email messaging to provide PII to others on a regular basis to have confidence that their messages are not intercepted or altered during transmission. They are concerned about which of the following types of security control?A. Integrity B. SafetyC. Availability D. Confidentiality[12]. Authentication is granting permission for admittance.A. True B. False[13] With the Discretionary Access Control (DAC) model, no object has an owner; the system has total control over that object.A. True B. False[14] Rule-Based Access Control can be changed by users.A. True B. False[15] Employee onboarding refers to the tasks associated with hiring a new employee.A. True B. False
Your firm has around 200 workers and contractors, and you are in charge of training them all on computer security. What topics would you cover in the fundamental security training session that you would conduct for workers who are not involved in IT? What type of further training on matters pertaining to security would be acceptable for staff after they have a firm grasp on the fundamentals?
Which of the following is true of vulnerability scanning? a. It uses automated software to scan for vulnerabilities. b. The testers are always outside of the security perimeter. c. It may disrupt the operation of the network or systems. d. It produces a short report of the attack methods and value of the exploited data.
Consider the statement: an individual threat agent, like a hacker, can be a factor in more than one threat category. If a hacker hacks into a network, copies a few files, defaces the Web page, and steals credit card numbers, how many different threat cate gories does this attack fall into? Using the Web, research Mafiaboy’s exploits. When and how did he compromise sites? How was he caught? Search the Web for the “The Official Phreaker’s Manual.” What information con tained in this manual might help a security administrator to protect a communications system? Using the categories of threats mentioned in our discussion of module 2, as well as the various attacks described, review several current media sources and identify examples of each.
Assume that you are the lead network security expert in your organization. Because of the recent rise in web security issues and the development of the global marketplace, your organization has decided to hire additional network security technicians. Once hired, you are to give a report to these individuals designed to illustrate holes in current security countermeasures, along with ways in which these holes can be filled. In your report, ensure you address the areas mentioned below: An explanation of which web security threats are most prevalent, the hazards they present, and how these threats are exploiting holes in current security countermeasures An explanation of the actions that should be taken to prevent existing web security countermeasures from being exploited An assessment of the pros and cons of choosing to implement measures such as firewalls, access control measures, and cryptographic systems
You have recently started working for your firm in the role of Chief Information Officer. As the Chief Information Security Officer of your company, the first thing you need to do is think of ways to stop the unintentional or intentional destruction of the data that belongs to your company. I would really appreciate it if you could kindly recommend any data security procedures for our firm.
Along with the firewall we constructed, identify three (3) important and distinct places in which our application and its environment remain susceptible, and suggest some alternate ways for mitigating those risks. Be precise, exhaustive, and critical. Consider writing this for your employer, but limit yourself to three paragraphs. Each paragraph should provide at least one vulnerability and one mitigation. 3 well-structured yet succinct paragraphs