Question:: Case Exercises Amy walked into her office cubicle and sat down. The entire episode with the blond man had taken well over two hours of her day. Plus, the police officers had told her the district attorney would also be calling to make an appointment to speak to her, which meant she would have to spend even more time dealing with this incident. She hoped her manager would understand. Questions: 1. Based on this case study, what security awareness and training documents and posters had an impact in this event? 2. Do you think that Amy should have done anything differently? What would you have done in the situation in which she found herself?

What goals does authentication serve? Verification methods are examined for their pros and cons.

The usage of a fingerprint reader, rather than a username and password, has been implemented as a new security precaution at your company. Because you shaved it off over the weekend, your computer can no longer use your fingerprint to verify your identity. As a direct result of this problem, you will no longer be able to use the computer you were using. What are the next steps?

What are the goals of the authentication procedure? Differentiate between the benefits and drawbacks of different forms of verification.

Describe the purpose and operation of a challenge-response authentication method. What makes it more secure than a typical password-based method is not immediately clear.

Distinguish between the challenges and responses used in the challenge–response system. It's not immediately clear what makes it more secure than a password-based strategy.

Computer Security is one of the fastest-moving fields in the world today. There are generally several incidents each week, including data breaches, large scale attacks, or some advancement in security research (i.e. new tools, techniques, vulnerabilities, or exploits). Select a recent event from your favorite security news source and summarize it. Include your source and an analysis of the event, including a summary of what happened, any new information from the event that changes current security practice, and any larger scale implications from the event. Relate the event to the topics in Chapter 1 of the book, namely the CIA triad, U.S. Compliance Laws (if any), IT domains, security policy, and/or data classification. In addition, relate the event to a biblical example.

There are multiple ways to manage logon credentials. To verify your identity, enumerate all of your accomplishments to date. What do you predict will happen in the future to passwords?

What process are done to establish a security breach?