Your Web server computer becomes infected with the Slammer worm. 5. Users are not aware that your organization prohibits accessing Facebook at work. 6. Attackers find deleted unencrypted copies of several files you created and stored as encrypted.
Availability 3.) Each of the following is a layer that protects security except: Communication 4.) Which of the following is true regarding a rogue AP? It is an unauthorized AP installed by an employee 5.) Which of the following is false regarding a man-in-the-middle attack?
c. Implement a front-end and back-end server topology. Configure a single HTTP virtual server on the front end and configure back-end servers with multiple virtual directories. 14. c. Disable support for rich-text formatting. 15. d. System Attendant 16. b. She needs to start the NNTP service manually and then configure it to start automatically 17. a.
Windows authorization mechanism C. Passwords plus smartcards D. Stored in a digital certificate E. Standard for smart card support F. Decrypts data encrypted with a certificate G. Firewall exceptions H. Standard for fingerprint scanners and other devices I. Potentially destructive software J. Firewall rule requiring IPsec 1. Multifactor authentication = C 2. Malware = I 3. Brute force =A 4.
Cyber terrorists can be motivated to target organizations that will result in the radical’s group to cause the most harm and/or receive the most attention for their party. Cyberterrorists use the internet to spread propaganda and enlist new members and use DoS/DDoS attacks to cause disruption to companies that represent actions against their belief’s (Vacca & Rudolph, 2011). Cyber terrorists can also steal information to be used for self-serving strategic purposes. Kostadinov (2012) makes the distinction between cybercrime and cyberterrorism in that the latter should resemble terrorist attacks via traditional methods but perpetrated virtually. Kostadinov goes on to note that most cyberterrorism actions are generally focused on website sabotage and email blasting.
Ensuring anti-malware software and data is up to date. Mandate Daily updates Organize collection of known malware signatures stored in signature database. Updating Malware Prevention Strategies Frequent Scans Multiple anti-malware software shields Frequent signature database updates Restrictive download policy Restrictive software installation policy Limited Web browser functionality Not running in Administrative mode unless necessary 3. Provide the steps given below to follow any time malware is detected A. Disconnect infected computer from network Download at least on alternate anti-malware software Install additional products on infected device Removal of detected malware B.
Malicious damage: Examples can be Viruses, Worms or Trojans a. Internal attacks come from within the organisation by disaffected staff. Individuals or a group have authorised access and privileges to the organisations network. They may use their knowledge on the organisations network to exploit or interrupt its functions. Internal attacks can be more difficult to find as attackers have the potential to remove any evidence of the attack more easily as they have more knowledge or access rights on the system as opposed to an outside attack.
Attackers are always looking for devices and software that are newly added to a system and not updated correctly with the security measures in place already. This is the door they look for to get in. A method to avoid such opportunities is to deploy an automated asset inventory discovery tool and use it to build a preliminary asset inventory of systems connected to an organization's public and private network. This will help make the system capable of identifying any new unauthorized devices that are connected to the network within 24 hours, and of alerting or sending e-mail notification to a list of enterprise administrative personnel. Without such a tool in place an attacker will use the unpatched device or software to gain access and manipulate the network how they please.
Port scan is as the name implies, a scan of the open ports on each computer of the network to define which ports are open and what services are running on them. This information can be used to set up an attack on the network by allowing the hacker to bypass vulnerability in the software being run or on any open ports that can be used to gain deeper access to the network. With a port scan the probe sends information to each port on the network and the open ones respond back, this data can be used to determine the easiest way to infiltrate the network. The safest way to defend against this type of probe is using a firewall. Just as in a ping sweep, if you deny access to a port scan requesting information from the network you render them
7) What is a denial of service attack? A) A denial of service attack occurs when the perpetrator sends hundreds of messages from randomly generated false addresses, overloading an Internet service provider's e-mail server. B) A denial of service attack occurs when an e-mail message is sent through a re-mailer, who removes the message headers making the message anonymous, then resends the message to selected addresses. C) A denial of service attack occurs when a cracker enters a system through an idle modem, captures the PC attached to the modem, and then gains access to the network to which it is connected. D) A denial of service attack occurs when the perpetrator e-mails the same message to everyone on one or more Usenet newsgroups LISTSERV lists.