A developer is building a new portal to deliver single-pane-of-glass management capabilities to customers with multiple firewalls. To improve the user experience, the developer wants to implement an authentication and authorization standard that uses security tokens that contain assertions to pass user information between nodes. Which of the following roles should the developer configure to meet these requirements? (Choose two.) A. Identity processor B. Service requestor C. Identity provider D. Service provider E. Tokenized resource F. Notarized referral

1. A key feature of hybrid IDPS systems is event correlation. After researching event correlation online, define the following terms as they are used in this process: compression, suppression, and generalization. 2. ZoneAlarm is a PC-based firewall and IDPS tool. Visit the product manufacturer at www.zonelabs.com, and find the product specification for the IDPS features of ZoneAlarm. Which of the ZoneAlarm products offer these features? 3. Using the Internet, search for commercial IDPS systems. What classification systems and descriptions are used, and how can these be used to compare the features and components of each IDPS? Create a comparison spreadsheet identifying the classification systems you find. 4. Use the Intermet to find vendors of thumbprint and iris scanning tools. Which of these tools is more economical? Which of these is least intrusive? 5. There are several online passphrase generators available. Locate at least two of them on the Internet, and try them out. What did…

Describe the idea of a system that uses a challenge and answer to authenticate users (CRAS). What makes this solution more secure than one that relies on a password?

Assume your company is intending to install an autonomous server room that runs without human intervention. A lights-out server room is a term used to describe such a space. Describe the type(s) of physical security controls you'd put in that room.