The IT department is concerned about the possibility of a guest device infecting machines on the corporate network or taking down the company's single Internet connection. Which of the following should a security analyst recommend to BEST meet the requirements outlined by the IT department? A Require the guest machines to install the corporate-owned EDR solution B Configure NAC to only allow machines on the network that are patched and have active antivirus c Place a firewall in between the corporate network and the guest network D. Configure the IPS with rules that will detect common malware signatures traveling from the guest network

The IT department is concerned about the possibility of a guest device infecting machines on the corporate network or taking down the company's single Internet connection. Which of the following should a security analyst recommend to BEST meet the requirements outlined by the IT department? A Require the guest machines to install the corporate-owned EDR solution B Configure NAC to only allow machines on the network that are patched and have active antivirus c Place a firewall in between the corporate network and the guest network D. Configure the IPS with rules that will detect common malware signatures traveling from the guest network

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter7: Risk Management: Treating Risk

Section: Chapter Questions

Problem 7E

See similar textbooks

Similar questions

select the coorect answer 4)The security team discovers that there is an unused FTP server running on one of the organization’s computer even though the organization has decided to discontinue all use of FTP. Which aspect of security management are most likely to discover the existence of this FTP server? Policy management Security auditing Security education Security operations 5)Which protocol network for telemetry would be useful for monitoring the organization’s web server including both the number of web request and the volume of data incoming/outgoing? IPFIX NTP SNMP Syslog
Jane Smith is responsible for security at the ABC Company. She has a moderate budget with which to purchase security solutions. To date, she has installed a router-based firewall between the network and the outside world. She also has a commercial virus scanner on every machine on the network. What other actions might you recommend to her? Would you recommend a different firewall? Why or why not? Would you recommend an Intrusion Detection System, and if so, where would you recommend she place it? . Whether you decide to keep her firewall or change the type, you need to be specific about how it works and why you made your determination. If you choose any other security hardware/software, you must identify where it will be located. If on the network, where. If on hosts, which. If you choose an IDS, you must specify what type you chose.
Which security control best meets the privacy goal of allowing a person to control their private information on a system? Encrypt private data when not in use Securely delete personal data when requested Use firewalls to restrict unauthorized network traffic Require two-factor authentication before permitting access
You are in charge of the network security of your organization. Explain how you would protectfollowing systems/activities. Your answer needs to include details such as the security protocol orsecurity control to be used, where they should be implemented, etc. Hosts within your organization are not subjected DNS spoofing attack where you need toensure that the DNS query for a hostname is never resolved to a fake IP address.
Dilip is a security analyst working in a cyber operations centre. He receives an alert that unusual network traffic being sent from a company file server and attempting to reach the Internet. He suspects the traffic may be the result of malware, trying to reach its C2 (command & control) server for further instructions.It is Dilip's job to now invoke his company's security incident response process. What phase of the process is currently in progress? a. Containment, Eradication and Recovery b. Preparation c. Command and Control d. Detection and Analysis e. Post-incident Activity f. Weaponisation
Your organization has created a data-sharing partnership with another business. Management of both organizations has decided they want to share data between their networks via FTP. Data sharing will occur between known, existing servers on each side of the network. You have been asked to devise a firewall-specific strategy to facilitate this new connection. What strategy would you recommend, and why?
You have been hired as a cybersecurity consultant for a company that has recently been breached in a crypto malware attack. According to file server logs, a large number of files on the network have been modified (encrypted). The company is looking for your guidance on the requirements below. Please provide a solution (in your own words) and your reasoning. a/ How to determine which files have been encrypted by the crypto-malware attack? The company would like to know the most efficient way as there are over 100,000 files potentially impacted. b/ What kind of policies and/or training would you suggest as a precautionary measure? c/ The company had some backups in alternate servers, but no consistent backup and recovery plan. The organization has agreed to have an RPO of 1 hour and an RTO of 4 hours. Please suggest the most appropriate backup strategy (full, differential, or incremental) to meet the requirement. d/ The company would like your help with their disaster recovery…
You are in charge of the network security of your organization. Explain how you would protectfollowing systems/activities. Your answer needs to include details such as the security protocol orsecurity control to be used, where they should be implemented, etc. Control access of WiFi users. Only staff working in the organization can have access to WiFinetwork. Even then, they should be prevented from accessing subnets that contain sensitivehosts such as database servers.
Which of the following products can an institution prefer to use if its antivirus software is up-to-date on the computers in its network?A) FirewallB) DLPC) Web ProxyD) NAC
Answer the following questions. Question a. Consider the following scenario: You are working as an IT support specialist and receive a call from a remote user saying they can’t access the company website. After verifying the user as an employee, how would you start trying to solve this problem? 1)Ask questions and gather information to identify the problem. 2)Tell the user it is a virus and ask to run a virus check. 3)Tell the user they need to bring or send the computer to the corporate office for troubleshooting. 4)Ask the user to clear the cache of the web browser. Question b. What does the “isolating the problem” troubleshooting method try to do? 1)Ask the user questions to make them feel part of the solution 2)Expand the area of the problem. 3)Shrink the scope of the potential issue. 4)Recreating the problem
Your organization has created a data-sharing partnership with another business. Management of both organizations has decided they want to share data between their networks via FTP. Data sharing will occur between known, existing servers on each side of the network. You have been asked to devise a firewall-specific strategy to facilitate this new connection. What strategy would you recommend, and why? Your answer should be approximately 200-250 words in length
Currently, you are working with a company based in Brisbane as a Network Engineer. During COVID19 the GM decided to move most of the company services for Brisbane and Adelaide branches online. The main goal of the company is to provide access to their clients with a secure online services environment. In this context, the company wants to implement and enhance its security system. The IT Manager asked you to conduct a risk assessment to identify network vulnerabilities and implement security measures to protect the network against external attacks. In your response, address the following questions: 1. Hash Message Authentication Codes (HMAC) is used to solve the problem of Man-in-the middle attacks. Explain the authentication process with suitable diagrams.