Q.1.1 Using suitable examples, discuss how you would use the three information security layers to secure a student information database for a College. Q.1.2 Using suitable examples. differentiate between two types of malware that have the primary trait of circulation. In your answer, justify why these types of malware are considered most problematic compared to others using examples. Q.1.3 Describe how the ARP poisoning attack can be used for the actions in (A-C) below using examples: A. Prevent Internet access. B. Steal data.

Q.1.1 Using suitable examples, discuss how you would use the three information security layers to secure a student information database for a College. Q.1.2 Using suitable examples. differentiate between two types of malware that have the primary trait of circulation. In your answer, justify why these types of malware are considered most problematic compared to others using examples. Q.1.3 Describe how the ARP poisoning attack can be used for the actions in (A-C) below using examples: A. Prevent Internet access. B. Steal data.

Principles of Information Security (MindTap Course List)

6th Edition

ISBN:9781337102063

Author:Michael E. Whitman, Herbert J. Mattord

Publisher:Michael E. Whitman, Herbert J. Mattord

Chapter2: The Need For Security

Section: Chapter Questions

Problem 1E

See similar textbooks

Similar questions

1. What methods does a social engineering hacker use to gain information about a user’s login ID and password? How would this method differ if it targeted an administrator’s assistant versus a data-entry clerk? 2. Consider the information stored in your personal computer. Do you currently have information stored in your computer that is critical to your personal life? If that information became compromised or lost, what effect would it have on you? 3. There are a number of professional organizations for computer security. Search for two organizations and share the websites and descriptions of those organizations. Share that information here:4. Choose two of the US federal agencies listed in Chapter 3 that deal with computer/cybercrime. List at least three differences, in terms of reach or responsibility, between the two organizations.
Theft of one's identity is a common kind of criminal behavior that sadly is on the increase due to the prevalence of the internet. Please provide a description of the many methods that cybercriminals may use to steal your identity as well as the preventative measures that, in your opinion, need to be implemented to avoid having this occur.
Assume that a security model is needed for protection of information on your personal computer. Using the 3-dimensional NSTISSC model, examine any cells related to one state of data (e.g. storage of information) and write a brief statement on how you would achieve the IA principles. Give examples. Are all 27 aspects of security worth examining at every company? Where/how do we start building or evaluating a security system?
Chapter 8 of Social Engineering: The Art of Human Hacking provides case studies from real-world attacks that illustrate key principles of social engineering in practice. Using the diagram you created as a reference, would any of the controls you outlined have helped prevent one of the attacks described in the assigned reading? If not, what was missing?
Avoid plagiarism 1. Give one example of ethical violations for IoT in PAPA model. Thoroughly explain the background of the ethical issues or crime, its violation of cyber law and the consequences. 2. Discussion: The usage of PAPA model in IoT Security
3- During a security assessment, a cybersecurity analyst finds many users with administrative rights. She recommends limiting the administrative access role to only the key staff responsible for supporting the infrastructure. This is an example of what fundamental cybersecurity principle? a. Simplicity b. Separation of duties c. Defence in depth d. Least privilege e. Non-repudiation
Analyze the following scenario: An employee using company resources sends email that is later retrieved when the employee sues the company. Is there a reasonable expectation of privacy? Is it different if the computer used was purchased by the employee but the email was sent during work hours? What additional facts or changes in your assumptions would alter your analysis? Ethically, what are the arguments, pro and con, for an employer monitoring electronic communication?
Question 4: Study the scenario and complete Question 4 Why Strong, Unique Passwords MatterCybersecurity experts make the recommendation for strong, unique passwords for several reasons - the first being that every day malicious cyber threat actors compromise websites and online accounts, and post lists of usernames, email addresses, and passwords online. This exposes people’s passwords, and worse yet, they are exposed with information that uniquely identifies the user, such as an email address. That means that a malicious actor can look for other accounts associated with that same person, such as work-related, personal social media, or banking accounts. When the malicious actor finds those accounts, they can try logging in with the exposed password and if the password is reused, they can gain access. This is why unique passwords matter.Secondly, when malicious cyber threat actors can’t easily find or a guess the password, they can use a technique called brute forcing. This is a…
Consider the following hypothetical court cases: briefly explain the associated cybercrimes, and identify which possible sections of the Computer Misuse Act could be applied to these cases: (i) Bob attacked his employer's computer system and caused significant disruption and financial loss. (ii) Alice created malware and sold it on the Dark Web, which allowed others to conduct Distributed Denial of Service attacks. She had remote control of over 1000 bots. (iii) Charlie hacked into over 10 people's social network accounts to take their private information and photographs, and share them online.
An unwanted security assault on a computer is classified as malware, which is a word that is often used to describe such an attack. Provide an overview of the most prevalent kinds of malware that exist in the digital world.In response to Question 1, can you list and quickly describe how any ONE (1) of the dangers listed in the previous question functions?
Essentially, computer viruses are malicious software programs that are difficult to detect and that propagate quickly through computer systems, damaging data or interfering with processing and memory systems. They are also known as computer trojans.Discuss the various types of software that are associated with computer viruses.Control and security on the Internet and other networks can be achieved through the use of firewall machines and software, which are also known as firewalls. Describe the properties of firewalls in detail.
Q(2) Hi there, Please answer all the five multiple choice questions. No written explanation needed for all the questions. Thank you in advance. [6] Which of the following risk mitigation strategies will allow Ann, a security analyst, to enforce least privilege principles? A User rights reviews B. Incident management C. Risk based controls D. Annual loss expectancy [7] A forensic analyst is reviewing electronic evidence after a robbery. Security cameras installed at the site were facing the wrong direction to capture the incident. The analyst ensures the cameras are turned to face the proper direction. Which of the following types of controls is being used? A. Detective B. Deterrent C. Corrective D. Preventive [8] A company that purchased an HVAC system for the datacenter is MOST concerned with which of the following? A. Availability B. Integrity C. Confidentiality D. Fire…