a.
Explanation of Solution
Given:
An organization that has set up three security levels on data that are accessed by users.
Data in the C:/Public folder is categorized as low-security data.
Data in a shared folder that some users can access is categorized as medium-security data.
Data in an encrypted and shared folder which needs a password is categorized as high-security data.
To find:Â The data of the party of the company, which was held on 4 July, should be kept at which security level.
Solution:
The data of the party of the company, which was held on 4 July, can be categorized in the low-security level. The data will be stored in the public folder of C drive in the system.
b.
Explanation of Solution
Given:
An organization that has set up three security levels on data that are accessed by users.
Data in the C:/Public folder is categorized as low-security data.
Data in a shared folder that some users can access is categorized as medium-security data.
Data in an encrypted and shared folder which needs a password is categorized as high-security data.
To find: The data of company’s invention, which has not been patented yet, should be kept at which security level.
Solution:
The data of company’s invention, which has not been patented yet, can be categorized in the high-security level as this is very important and confidential data of the company. The data will be stored in the encrypted and shared folder which requires a password to access the data.
c.
Explanation of Solution
Given:
An organization that has set up three security levels on data that are accessed by users.
Data in the C:/Public folder is categorized as low-security data.
Data in a shared folder that some users can access is categorized as medium-security data.
Data in an encrypted and shared folder which needs a password is categorized as high-security data.
To find:Â The data of resumes of different people, who applied in the company, should be kept at which security level.
Solution:Â
The data of resumes of the applicants can be categorized at the low-security level as resumes do not contain confidential information. The data will be stored in the public folder of the C drive of the system.
d.
Explanation of Solution
Given:
An organization that has set up three security levels on data that are accessed by users.
Data in the C:/Public folder is categorized as low-security data.
Data in a shared folder that some users can access is categorized as medium-security data.
Data in an encrypted and shared folder which needs a password is categorized as high-security data.
To find:Â The data of the payroll spreadsheet should be kept at which security level.
Solution:Â
The data of the payroll spreadsheet can be categorized at medium-security level as it will be accessed by some specific user who has the authority to access the payroll information. The data will be stored in the shared that can be accessed by some users.
e.
Explanation of Solution
Given:
An organization that has set up three security levels on data that are accessed by users.
Data in the C:/Public folder is categorized as low-security data.
Data in a shared folder that some users can access is categorized as medium-security data.
Data in an encrypted and shared folder which needs a password is categorized as high-security data.
To find:Â The data of job openings details of the company should be kept at which security level.
Solution:Â
The data of job openings in the company can be categorized at low-security level. The data will be stored in the public folder of the C drive of the system.
Want to see more full solutions like this?
Chapter 16 Solutions
Microsoft Office Access 365/2019 A Skil
- We've received an alert about a Brute Force attempt on this user. Based on the Windows Event Log below, please answer the following questions:1. What is the account name associated with the login failures?2. What system is this user attempting to authenticate from?3. What domain controller are they attempting to authenticate to?4. What does Logon Type 3 mean and what does that signify?5. What type of authentication was used? 6. What's the other most common Windows logon authentication?7. What do the Status and Sub Status codes mean and what does that tell us?8. Can you conclude the investigation as a likely Brute Force event or a False Positive, and why or why not?10/19/2020 01:03:38 PMLogName=SecuritySourceName=Microsoft Windows security auditing.EventCode=4625EventType=0Type=InformationComputerName=dendcprd02.client.comTaskCategory=LogonOpCode=InfoRecordNumber=261208668Keywords=Audit FailureMessage=An account failed to log on.Subject:Security ID: NULL SIDAccount Name: -Account…arrow_forwardWhich of the following is not true regarding a honeypot? a. It is typically located in an area with limited security. b. It contains real data files because attackers can easily identify fake files. c. It cannot be part of a honeynet. d. It can direct an attacker's attention away from legitimate servers.arrow_forwardYou have been hired as a cybersecurity consultant for a company that has recently been breached in a crypto malware attack. According to file server logs, a large number of files on the network have been modified (encrypted). The company is looking for your guidance on the requirements below. Please provide a solution (in your own words) and your reasoning. a/ How to determine which files have been encrypted by the crypto-malware attack? The company would like to know the most efficient way as there are over 100,000 files potentially impacted. b/ What kind of policies and/or training would you suggest as a precautionary measure? c/ The company had some backups in alternate servers, but no consistent backup and recovery plan. The organization has agreed to have an RPO of 1 hour and an RTO of 4 hours. Please suggest the most appropriate backup strategy (full, differential, or incremental) to meet the requirement. d/ The company would like your help with their disaster recovery…arrow_forward
- You are using the terminal to move through your computer’s folders. You’d like to get into the Cybersecurity folder. You type in pwd and find that your current folder path is ~/Users/student/Documents/Cybersecurity/Images. Which of the following commands will place you inside the Cybersecurity folder? cd .. mv .. cd Cybersecurity mv Cybersecurityarrow_forward74) Which of the following is a consequence of just a phlashing attack? A. Personal information is stolen B. Affected device must be replaced C. Affected device must be reflashed D. None of the abovearrow_forwardWhich of the following are examples of PREVENTIVE controls? [SELECT ALL THAT APPLY] a) Software patching b) encryption c) Monthly access control review d) Network segmentation e) A unique user ID and passwordarrow_forward
- You work as the head of the IT department for a local hospital. Another hospital in your state was recently the target of a ransomware attack. Fearing a similar attack, senior management of your hospital has asked you if your hospital is prepared for such an attack. They have requested a 1- to 2-page memo that describes the hospital’s protections against a ransomware attack. In your memo, include a chart with columns for Authorization, Authentication, Roles, and Mitigation. In each column, list related security protections the hospital should use to protect against ransomware attacks. Additionally, based on your chart, provide a final summary on how the hospital can mitigate the risk of a ransomware attack and how the hospital can respond if it does face such an attack.arrow_forwardSharon recently lost an encryption certificate that rendered some of her EFS-encrypted files unrecoverable. To prevent a similar situation from arising in the future, she wants to create a recovery certificate for recently encrypted files. She creates the recovery certificate.What should Sharon do next? a. Run cipher with the /r:filename option, where filename is the name of the recovery certificate b. Import the recovery certificate into the local security policy as a data recovery agent c. Use the public key of the recovery certificate to encrypt the symmetric key d. Run cipher with the /u option to update the existing encrypted filesarrow_forwardYou are creating an app that will allow university students to connect with advisors and other students to discuss stressful situations. Only students who attend the university can access the app. Which two steps should you take to protect student’s identity and personal information? (Choose two.) Group of answer choices Hash student data transmissions with a random salt. Hash the password using an algorithm in the Google database Hash the password with a random salt. Encrypt the password. Encrypt student data transmissions.arrow_forward
- You are using the terminal to move through your computer’s folders. You’d like to get into the Cybersecurity folder. You type in pwd and find that your current folder path is ~/Users/student/Documents/Cybersecurity/Images. Which of the following commands will place you inside the Cybersecurity folder? Option a. cd .. Option b. mv .. Option c. cd Cybersecurity Option d. mv Cybersecurityarrow_forwardAssume that you want to make the message available to the users who are authorized to read the respective message. Each message contains some confidential data; therefore, instead of sending the plain text to each user, you decided to encrypt each message using secret key encryption and make the encrypted messages available for read. You need to distribute the encryption keys with the encryption methods to the authorized users. The communication channel between the users and the website is insecure; however, the pubic keys of the users are encrypted through double encryption methods for 2-layer of authentication mechanism and convert into cipher text as follows. The following cipher message was produced using the Rail Fence algorithm with 3 rails: “WECRLTEERDSOEEFEAOCAIVDEN” What is the corresponding plain text?What’s wrong with the shift cipher? Provide any three reasons.arrow_forward1.Marty is designing a new access control system for his organization. He created groups for each type of user: engineers, managers, designers, marketers, and sales. Each of these groups has different access permissions. What type of access control scheme is Marty using? Discretionary access control Role-based access control Rule-based access control Mandatory access control 2.What type of malware is self-replicating? Botnet Trojan Worm Spam 3. A ______________ is an encrypted hash.arrow_forward
- A+ Guide To It Technical SupportComputer ScienceISBN:9780357108291Author:ANDREWS, Jean.Publisher:Cengage,LINUX+ AND LPIC-1 GDE.TO LINUX CERTIF.Computer ScienceISBN:9781337569798Author:ECKERTPublisher:CENGAGE L