WHEN WORKING TO RESTORE SYSTEMS TO THEIR ORIGINAL CONFIGURATION AFTER A LONG-TERM APT COMPROMISE, CHARLES HAS THREE OPTIONS: option 1: he can restore from a backup and then update patches on the system. option 2: he can rebuild and patch the system using the original installation media and application software and his organization's build documetation. option 3: he can remove the compromised accounts and rootkit tools and then fix the issues that allowed the attackers to access the systems. option 4: none of these.Charles should hire a third party to assess the systems before proceeding WHICH OPTION SHOULD CHARLES CHOOSE IN THIS SCENARIO?

WHEN WORKING TO RESTORE SYSTEMS TO THEIR ORIGINAL CONFIGURATION AFTER A LONG-TERM APT COMPROMISE, CHARLES HAS THREE OPTIONS: option 1: he can restore from a backup and then update patches on the system. option 2: he can rebuild and patch the system using the original installation media and application software and his organization's build documetation. option 3: he can remove the compromised accounts and rootkit tools and then fix the issues that allowed the attackers to access the systems. option 4: none of these.Charles should hire a third party to assess the systems before proceeding WHICH OPTION SHOULD CHARLES CHOOSE IN THIS SCENARIO?

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter7: Risk Management: Treating Risk

Section: Chapter Questions

Problem 7E

See similar textbooks

Similar questions

Define the purpose of each Linux OS tools by completing the table given below: TOOLS FUNCTION Malware analysis tools Intrusion detection systems (IDSs) Firewalls Log managers Security information and event management (SIEM) Ticketing systems PenTesting Log Files Rootkit Check Configuration Files
what is the liklihood percatnge for these vulnerabilities? with references threat : Acts of human error or failure vulnerabilities : Inappropriate sharing of account information likllihood: ???? threat : Technical Software Failures or errors vulnerabilities : Server suffer from unreported bug or errors likllihood: ???? threat : Technical Software Failures or errors vulnerabilities : Improper firewall configuration. likllihood: ????
Within the Windows 7 Security Technical Implementation Guide (STIG), what are the three Vulnerability Severity Code Definitions defined? DumpSec is a tool used by system administrators performing information assurance on a Microsoft® Windows 7 workstation. What is the purpose of this tool? From the Windows 7 Security Technical Implementation Guide (STIG), where can Windows 7 File & Registry Settings be reviewed and audited on a Windows 7 workstation?
Why is logging and monitoring is important to organizations? What can be discovered through monitoring of logs and what are the implications of not doing as such.What type of security controls, servers and any other technology you can think of are needed to be monitored? Please mention at least 3 technologies and at least 1 log type per technology (for example, monitoring all Firewall logs by getting the syslogs of each firewall in the organization.What type of open-source technology can you use to your advantage to build a logging and monitoring system? What type of protocols, services and so on will you use in this process? Please provide a detailed explanation.
a)The chief information security officer has requested information about a recent regional breach that affected many companies, including yours. Which of the following would be the least helpful threat intelligence source to use to investigate? a. Threat maps b. Dark web c. File and code repositories d. Vulnerability databases b)Moe is trying to add a new operating system to a personal computer. He was able to install Linux in the free space available on the hard drive and adjust the boot loader so that he can select an operating system when booting. However, when he tries to boot to Linux, the system will not allow it. He has determined that boot security is stopping him. Which of the following is the most likely reason for this? a. Secure Boot does not have the proper information to allow the system to boot. b. The computer is using a legacy BIOS boot. c. Measured Boot cannot access…
For the Nexus malware, please write a short paragraph based on the given background and website info: - the date of the first incident’s report - How does it work, - How one should protect his/her system against this malware - If infected, how one can cope with that? Is there any solution? Nexus malware is an Android banking trojan promoted via a malware-as-a-service model. The malware has been advertised on several underground cybercrime forums since January 2023, as reported in new research from Cleafy, an Italian-based cybersecurity solutions provider. In an underground cybercrime forum ad, the malware project is described as “very new” and “under continuous development.” More messages from the Nexus author in one forum thread indicate the malware code has been created from scratch. An interesting note: The authors forbid the use of the malware in Russia and in the Commonwealth of Independent States countries. Potential impact of Nexus Android malware The trojan was initially…
Your boss received an email from a stranger Mr. H. yesterday. Mr. H. claimed that he discovered a loophole in your system that may allow hackers to disrupt the firm’s operations and leak customer data. Mr. H. proposed that he was capable to solve the security problem if your firm paid him reasonably.Your boss asked you to hold a short meeting with some of the key executives to discuss the system security issue of your firm. You will briefly explain the following aspects in the meeting:a) Describe five possible destructive hacker activities. b) Suggest five tools or mechanisms that may reduce and/or prevent security threats. c) What is the nature of Mr. H.? What immediate action(s) should your firm take after receiving the email from Mr. H.
Which is not part of the first stage of passive analysis? Group of answer choices install the operating system install any necessary applications on a computer record the “clean” state malicious code is executed on the system for a period of time
Assuming that we had to place our current Yoga application into production, with the addition of the firewall we installed identity three(3) significant and distinct areas for which our application and its environment is still vulnerable, and list some possible ways we would need to protect those vulnerabilities? Be sure to be specific, thorough, and use critical thinking. Imagine this is for your boos, and your job depends on it, but keep it limited to just three paragraphs. Each paragraph should clearly list a vulnerability and at least one mitigation for each. Expected length: 3 well-formed but concise paragraphs.
1.Which of the following techniques is used by NIDS to identify potential security threats? Hardening Virus scanning Firewall blocking Behavior analysis 2.A __________ is a network that is logically separated from the rest of the organization's network and is typically used to isolate sensitive or critical systems. 3.What is the best defense against buffer overflow attacks? Limiting access to sensitive systems to only authorized users Input Validation Regularly backing up important data Installing antivirus software on all systems
SCENARIO 1: You have just completed a routine security audit on the company’s information systems, and you found several areas of vulnerability. For example, file permissions have not been updated in some time, no comprehensive password policy exists, and network traffic is not fully encrypted. You noted these areas, among others, in a report to your supervisor. The report included specific recommendations to fix the problems. Your supervisor responded by saying that budgets are tight right now, and she could not approve your requests to resolve these issues. As an IT professional, you are very uncomfortable with the risk level, but you have been unable to sway your supervisor. When you discussed the situation with a colleague, he said, “Why worry about it? If it’s good enough for her, it should be good enough for you.” What do you think of your colleague’s advice, and why? Is this an ethical question? If you are still is uncomfortable, what are your options? SCENARIO 2: You work for a…
22. Which of the following description about firewall is not true? A. firewalls can separate corporate network from Internet, but can not segment a corporate network into secure zones. B. each firewall in the organization must follow the same security policy. C. organizations should remove from their firewalls any unnecessary software. D. organizations often install intrusion detection systems as part of their firewalls.