Jane Smith is responsible for security at the ABC Company. She has a moderate budget with which to purchase security solutions. To date, she has installed a router-based firewall between the network and the outside world. She also has a commercial virus scanner on every machine on the network. How would you assess Jane’s security requirements? (See Select Systems Controls in Research Materials.) Describe three security controls Jane might be missing.

Jane Smith is responsible for security at the ABC Company. She has a moderate budget with which to purchase security solutions. To date, she has installed a router-based firewall between the network and the outside world. She also has a commercial virus scanner on every machine on the network. How would you assess Jane’s security requirements? (See Select Systems Controls in Research Materials.) Describe three security controls Jane might be missing.

Principles of Information Security (MindTap Course List)

6th Edition

ISBN:9781337102063

Author:Michael E. Whitman, Herbert J. Mattord

Publisher:Michael E. Whitman, Herbert J. Mattord

Chapter7: Security Technology: Intrusion Detection And Prevention Systems, And Other Security Tools

Section: Chapter Questions

Problem 2E

See similar textbooks

Similar questions

Jane Smith is responsible for security at the ABC Company. She has a moderate budget with which to purchase security solutions. To date, she has installed a router-based firewall between the network and the outside world. She also has a commercial virus scanner on every machine on the network. What other actions might you recommend to her? Would you recommend a different firewall? Why or why not? Would you recommend an Intrusion Detection System, and if so, where would you recommend she place it? . Whether you decide to keep her firewall or change the type, you need to be specific about how it works and why you made your determination. If you choose any other security hardware/software, you must identify where it will be located. If on the network, where. If on hosts, which. If you choose an IDS, you must specify what type you chose.
SCENARIO 1: You have just completed a routine security audit on the company’s information systems, and you found several areas of vulnerability. For example, file permissions have not been updated in some time, no comprehensive password policy exists, and network traffic is not fully encrypted. You noted these areas, among others, in a report to your supervisor. The report included specific recommendations to fix the problems. Your supervisor responded by saying that budgets are tight right now, and she could not approve your requests to resolve these issues. As an IT professional, you are very uncomfortable with the risk level, but you have been unable to sway your supervisor. When you discussed the situation with a colleague, he said, “Why worry about it? If it’s good enough for her, it should be good enough for you.” What do you think of your colleague’s advice, and why? Is this an ethical question? If you are still is uncomfortable, what are your options? SCENARIO 2: You work for a…
You have been hired as a cybersecurity consultant for a company that has recently been breached in a crypto malware attack. According to file server logs, a large number of files on the network have been modified (encrypted). The company is looking for your guidance on the requirements below. Please provide a solution (in your own words) and your reasoning. a/ How to determine which files have been encrypted by the crypto-malware attack? The company would like to know the most efficient way as there are over 100,000 files potentially impacted. b/ What kind of policies and/or training would you suggest as a precautionary measure? c/ The company had some backups in alternate servers, but no consistent backup and recovery plan. The organization has agreed to have an RPO of 1 hour and an RTO of 4 hours. Please suggest the most appropriate backup strategy (full, differential, or incremental) to meet the requirement. d/ The company would like your help with their disaster recovery…
Your firm has entered into a data-sharing arrangement with another firm.Both firms' administrations have agreed to use FTP to transfer data over their networks.Data will be transmitted between already-established servers on both ends of the network.You've been tasked with devising a firewall-specific method for allowing this new connection.What are your plans for the future? Which one do you think is the best, and why?
Your company has made a data-sharing agreement with another company. The administration of both companies has decided to use FTP to exchange data across their networks. On both ends of the network, data will be exchanged between already-established servers. You've been given the duty of coming up with a firewall-specific technique to allow this new connection. What is your plan of action? Which one would you recommend, and why?
Case Project 4-2: Testing DNS Security Time Required: 30 minutes Objective: Create a report outlining a plan to determine if any DNS servers are vulnerable to zone transfer attacks. Description: You have just joined the IT department at the Alexander Rocco Corporation. You are trying to learn the configuration of the corporate network, including what DNS servers are in place and how they are configured. Other IT staff members are too busy to train you, so you decide to figure things out for yourself. You know better than to start scanning the network and checking for vulnerabilities without written authorization, so you are going to create a document that will outline what you would like to do and have it approved by your manager. Create a two-page report to submit for your manager's approval. In this report, outline what tools you might use and how you would use them to discover what DNS servers you have on your network and whether any DNS servers you discover are vulnerable to zone…
Jane Smith is responsible for security at the ABC Company. She has a moderate budget with which to purchase security solutions. To date, she has installed a router-based firewall between the network and the outside world. She also has a commercial virus scanner on every machine on the network. How would you assess Jane’s security requirements? Describe three security controls Jane might be missing.
Which of the following statements is NOT true about honeypot? Question 62 options: Monitoring on honeypot is not necessary All traffic going to honeypots/honeynets is suspicious It can be used to detect attacks a computer system intended to mimic likely targets of cyberattacks
Jane Smith is responsible for security at the ABC Company. She has a moderate budget with which to purchase security solutions. To date, she has installed a router-based firewall between the network and the outside world. She also has a commercial virus scanner on every machine on the network. What other actions might you recommend to her? Would you recommend a different firewall? Why or why not?
Create, then document 2 firewall rules that would be important to include if all outbound traffic is being denied by the firewall rules. Explain your decision. Remember, all outbound traffic is being restricted. In order to having a functioning network, what 2 firewalls rules would you create? (ie: Since you have only 2 rules in this assignment, ask yourself, Which type of outbound signals (maybe, ports, OR maybe traffic type OR maybe network access would you permit?)
When setting up PPP authentication, you may choose between the Password Authentication Protocol (PAP) and the Challenge Handshake Authentication Protocol (CHAP). With that in mind, what is the safest choice? Defining your emotion is essential.
How does IPSec create a set of security parameters?