CIS 502 Week 11 Discussion Questions – Strayer University New

CIS/502 Week 11 Discussion Questions – Strayer New

Click On The Link Below to Purchase A+ Graded Material
Instant Download

http://budapp.net/CIS-502-Week-11-Discussion-Questions-Strayer-New-CIS502W11D.htm

 

Week 11 DQ 1
“Course Conclusion” Please respond to the following:
• You have just completed 10 weeks of a security management course. Imagine you have been asked to create a one-day training course highlighting the important elements of what you have just learned in the past 10 weeks.

o Create a hierarchy of five (no more or no less) of the most important topics that you believe need to be addressed in this one-day course that best fits the course title of “Theories of Security Management: The Essentials Presented in One Day.” Give a detailed rationale for each of the five topics.

Week 11 DQ 2
“Course Summary” Please respond to the following:
• Using 140 characters or less (the length of a Tweet), summarize the importance of this class to someone unfamiliar with the concepts.
• Discuss how you can apply the learning outcomes of this course to your professional and personal life.

CIS 502 Week 10 Technical Paper – Strayer University New

CIS/502 Week 10 Technical Paper – Strayer New
Click On The Link Below to Purchase A+ Graded Material
Instant Download

http://budapp.net/CIS-502-Week-10-Technical-Paper-Strayer-New-CIS502TP.htm

 

Technical Paper: Risk Assessment
Due Week 10 and worth 150 points
Global Finance, Inc.
Internet
OC193 10Gbps
Remote Dial UpUsers
OC193 10Gbps
DMZ
Border (Core) Routers
Distribution Routers
VPN Gateway
10Gbps
RAS
PBX
Printers Mgmt (x3)
Credit Dept
Finance
Accounting Worstations Printers
Worstations (x5)
LoanDept WorstationsPrinters
10Gbps
10 Gbps
10 Gbps
Oracle 9i DB Server
10 Gbps
Access Layer VLAN Switch
10 Gbps
10 Gbps
Exchange 2000 Email
Worstations (x10)Printers
(x3)
Worstations (x49) Printers
(x25)
Customer Services Worstations
(x12)
(x5)
Printers (x3)
SUS Server
(x5)
(x63)
(x7)
Off-Site Office VPN Gateway
PSTN
Intranet Web Server
Internal DNS
File and Print Server
Workstations (x7)
100Mbps
Trusted Computing Base Internal Network
Global Finance, Inc. Network Diagram
Above is the Global Finance, Inc. (GFI) network diagram. GFI has grown rapidly this past year and acquired many network devices as displayed in the diagram. The company invested in the network and designed it to be fault tolerant and resilient from any network failures. However, although the company’s financial status has matured and its network has expanded at a rapid pace, its network security has not kept up with the company growth.
GFI’s network is fairly stabilized as it has not experienced many outages due to network failures. GFI has hired three (3) network engineers to keep up with the network growth and the bandwidth demand by the company employees and the clients. However, the company has not hired any security personnel who can take care of the operational security responsibility.
The trusted computing base (TCB) internal network in the Global Finance, Inc. Network Diagram hosts the company’s mission critical systems without which the company’s operations and financial situation would suffer. The Oracle database and email systems are among the most intensively used application servers in the company. GFI cannot afford system outages because its cash flow and financial systems heavily depend on the network stability. GFI has experienced DOS network attacks twice this year and its Oracle database and email servers had been down for a week. The recovery process required GFI to use $25,000 to restore its operations back to normal. GFI estimated the loss from these network attacks at more than $100,000 including lost customer confidence.
Write a twelve to fifteen (12-15) page formal risk assessment proposal and redraw the above diagram of a secure and risk-mitigating model in which you:
1. Describe the company network, interconnection, and communication environment.
2. Assess risk based on the Global Finance, Inc. Network Diagram scenario. Note: Your risk assessment should cover all the necessary details for your client, GFI Inc., to understand the risk factors of the organization and risk posture of the current environment. The company management will decide what to mitigate based on your risk assessment. Your risk assessment must be comprehensive for the organization to make data-driven decisions.
a. Describe and defend your assumptions as there is no further information from this company. The company does not wish to release any security-related information per company policy.
b. Assess security vulnerabilities, including the possibility of faulty network design, and recommend mitigation procedures for each vulnerability.
c. Justify your cryptography recommendations based on data-driven decision making and objective opinions.
3. Examine whether your risk assessment methodology is quantitative, qualitative, hybrid, or a combination of these.
4. Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.
5. Create the redrawn diagram of a secure and risk-mitigating model using Microsoft Visio or its open source equivalent. Note: The graphically depicted solution is not included in the required page length.
Your assignment must follow these formatting requirements:
 Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions.
6. Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length.
7.  Include charts or diagrams created in Excel, Visio, MS Project, or one of their equivalents such as Open Project, Dia, and OpenOffice. The completed diagrams/charts must be imported into the Word document before the paper is submitted. 
The specific course learning outcomes associated with this assignment are:
 Evaluate an organization’s security policies and risk management procedures, and its ability to provide security countermeasures.
 Describe the details and the importance of application security models and their implementation from a management perspective.
 Analyze the methods of managing, controlling, and mitigating security risks and vulnerabilities.
 Evaluate and explain from a management perspective the industry-standard equipment, tools, and technologies organizations can employ to mitigate risks and thwart both internal and external attacks.
 Explain access control methods and attacks.
 Use technology and information resources to research issues in security management.
 Write clearly and concisely about the theories of security management using proper writing mechanics and technical style conventions.

CIS 502 Week 10 Discussion Questions – Strayer University New

CIS/502 Week 10 Discussion Questions – Strayer New

Click On The Link Below to Purchase A+ Graded Material
Instant Download

http://budapp.net/CIS-502-Week-10-Discussion-Questions-Strayer-New-CIS502W10D.htm

 

Week 10 DQ 1
“Telecommunications Technologies” Please respond to the following:
• Imagine you are a CISO of a publically traded company and concerned about security when sending any message traffic over the Internet to your remote sites. Determine the security measures you would consider implementing to mitigate security risks when sending message traffic over the Internet. Explain your reasoning.
• Suggest security devices or configurations that should be employed to mitigate risks existing in telecommunications. Support your response.

Week 10 DQ 2
“Network Security” Please respond to the following:
• Examine the defense-in-depth concept of a small government agency that has recently relocated to a new building. Explain what types of network security measures you would recommend to protect this agency. Make a list of assumptions to support your reasoning.
• From the e-Activity, choose the one emerging technology you feel will have the biggest impact on telecommunications and network security, and explain why.

CIS 502 Week 9 Discussion Questions – Strayer University New

CIS/502 Week 9 Discussion Questions – Strayer New

Click On The Link Below to Purchase A+ Graded Material
Instant Download

http://budapp.net/CIS-502-Week-9-Discussion-Questions-Strayer-New-CIS502W9D.htm

 

Week 9 DQ 1
“Security Architecture and Design” Please respond to the following:
• Assess, from a management perspective, the different types of security models and their implications to protect the organization’s assets. Identify the one model you believe is the most versatile and describe why.
• Choose one security architecture type and describe what it protects in terms of confidentiality, integrity, availability, authenticity, non-repudiation, identification, or authorization.

Week 9 DQ 2
“Applications of Security Architecture” Please respond to the following:
• Recommend a security architecture that would be the most appropriate for a small medical hospital that deals with patient record systems and needs to protect personally identifiable information (PII) and comply with Health Insurance Portability and Accountability Act (HIPPA). Justify your recommendation.
• From the e-Activity, identify the industry in which each security model would be best applicable for and why. Be sure to identify the security models from your findings and cite all sources.

CIS 502 Week 8 Discussion Questions – Strayer University New

CIS/502 Week 8 Discussion Questions – Strayer New

Click On The Link Below to Purchase A+ Graded Material
Instant Download

http://www.hwgala.com/CIS-502-Week-8-Discussion-Questions-Strayer-New-CIS502W8D.htm

Week 8 DQ 1
“Physical Security” Please respond to the following:
• From the e-Activity, identify three physical security measures the organization uses to secure the organization’s assets. Explain how physical security adds protection to defense-in-depth.
• Imagine a local financial company just expanded its operations into five branches connected over a broadband network connection. The company has expanded rapidly due to customer demand and has not implemented any security measures. Differentiate physical security from logical security and recommend a list of security measures for the local financial company. Justify each security measure you recommend.

Week 8 DQ 2
“Environment Security” Please respond to the following:
• Imagine you are the CISO of a small company that has experienced fire incidents in the computer room and lost several important computer assets. Determine the environmental security measures you would recommend. Justify your response.
• From the e-Activity, evaluate the effectiveness of the physical and environmental security measures used by the organization you researched in regard to protecting the organization’s assets. Cite all sources.

CIS 502 Week 8 Case Study 4 – Strayer University New

CIS/502 Week 8 Case Study 4 – Strayer New
Click On The Link Below to Purchase A+ Graded Material
Instant Download

http://www.hwgala.com/CIS-502-Week-8-Case-Study-4-Strayer-New-CIS502W8C.htm

Case Study 4: Remote Access Attacks
Due Week 8 and worth 100 points

TAPE LIBRARY
Remote Tape Library
BLDG 3
4-Windows PC
Ethernet
Router
Firewall
3-CISCO IDS Sensors

28-Windows PC
Ethernet
BLDG 4
30-Windows PC
Ethernet
BLDG 2
Main Bldg
10-Terminals 40 Windows PCs
ROOM 10

10-Terminals
RADIUS SERVER
Firewall

VPN Server
WEB Server
IDS Monitor
2-File Servers UNIX SYSTEM V
Ethernet
8-DISK DRIVES
4-Tape drive

System 1000
Quick Finance Company Network Diagram
Above is the Quick Finance Company network diagram. The company is a small business and does not invest much in security protection. System 1000 hosts a customer database as well as employee payroll systems. The company Web server has been defaced twice this month and the VPN server has suffered from session hijacking and Denial-of-Service (DOS) attacks twice last year. The company does not enforce a password policy and does not have a dedicated security professional.
Write a five to eight (5-8) page paper in which you:
1. Analyze the Quick Finance Company Network Diagram and describe the assumptions you will need to make in order to identify vulnerabilities and recommend mitigation techniques as there is no further information from this company. The company does not wish to release any security related information per company policy.
2. Analyze the above case and network diagram, and describe how each access point is protected or unprotected.
3. Evaluate and describe the vulnerabilities of the Quick Finance Company’s network based on the network design.
4. Rank the top three (3) most likely network-based attacks in the order they are likely to occur and suggest countermeasures for each.
5. Recommend mitigation procedures to reduce or eliminate business interruptions.
6. Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.
Your assignment must follow these formatting requirements:
 Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions.
 Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length. 
The specific course learning outcomes associated with this assignment are:
 Describe the details and the importance of application security models and their implementation from a management perspective.
 Explain access control methods and attacks.
 Compare and contrast network-based attacks and countermeasures.
 Evaluate potential situations of business interruption and the planning necessary to mitigate the threats involved.
 Use technology and information resources to research issues in security management.
 Write clearly and concisely about the theories of security management using proper writing 
mechanics and technical style conventions.

CIS 502 Week 7 Discussion Questions – Strayer University New

CIS/502 Week 7 Discussion Questions – Strayer New

Click On The Link Below to Purchase A+ Graded Material
Instant Download

http://www.hwgala.com/CIS-502-Week-7-Discussion-Questions-Strayer-New-CIS502W7D.htm

Week 7 DQ 1
“Operations Security” Please respond to the following:
• Imagine you are the CISO of a large organization that changes its assets, applications, and configurations dynamically. The organization is in a constant reactive model in responding to security incidents. Explain what benefits would be realized if continuous monitoring and risk management processes are in place and operational.
• Recommend and describe the vulnerability management procedures you believe should be in place for a small finance company that has two remote sites connected with a virtual private network connection.

Week 7 DQ 2
“Change and Configuration Management” Please respond to the following:
• Imagine you are the CISO of a large organization. Analyze change and configuration management and explain why it is important in regard to computer operations. Justify your response by including two examples of changes introduced to networks.
• From the e-Activity, evaluate the organization’s security policies from your findings and make a suggestion to improve at least one of these policies. Support your response and cite all sources.

CIS 502 Week 7 Case Study 3 – Strayer University New

CIS/502 Week 7 Case Study 3 – Strayer New
Click On The Link Below to Purchase A+ Graded Material
Instant Download

http://www.hwgala.com/CIS-502-Week-7-Case-Study-3-Strayer-New-CIS502W7C.htm

Case Study 3: Mobile Devices Security
Due Week 7 and worth 100 points
The use of mobile devices is prevalent and growing rapidly as users heavily depend on them. Unfortunately, attackers follow the money and user population. In addition, mobile devices do not receive patches for their vulnerabilities. The Zeus-in-the-Mobile (ZitMo) attack against Android users is an example defeating the emerging technology to steal user’s credentials and ultimately money. Mobile devices can also spread malware.
Read the article titled, “Mobile device attacks surge”, located at http://www.treasuryandrisk.com/2011/02/08/pr-mobile-device-attacks-surge, and FIPS 140-2 Security Policy, located at http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140sp/140sp1648.pdf. In addition, read the report titled, “Emerging Cyber Threats 2012”, located at http://www.gtisc.gatech.edu/doc/emerging_cyber_threats_report2012.pdf.
Write a five to eight (5-8) page paper in which you:
1. Describe the emerging cybersecurity issues and vulnerabilities presented in the “Emerging Cyber Threats 2012” report.
2. Analyze vulnerabilities of mobile devices in regard to usability and scale based on your research and suggest methods to mitigate the vulnerabilities of mobile devices.
3. Assess and describe the value of cryptography and encryption in regard to Equifax’s approach to implementing stronger security policies around mobile devices.
4. Justify Gunter Ollmann’s comments about Zeus-in-the-Mobile (ZitMo) and describe the implications of advanced security breaches such as this.
5. Several challenges of controlling information online are set forth in the section of the article titled, “Controlling Information Online – A New Frontier in Information Security”. Determine what you believe is the greatest challenge in regard to controlling information online.
6. Justify Dan Kuykendall’s statement about the biggest issue with mobile browsers and give two (2) examples illustrating his point.
7. Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.
Your assignment must follow these formatting requirements:
 Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions.
 Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length. 
The specific course learning outcomes associated with this assignment are:
 Analyze the methods of managing, controlling, and mitigating security risks and vulnerabilities.
 Define common and emerging security issues and management responsibilities.
 Explain access control methods and attacks.
 Describe the applications and uses of cryptography and encryption.
 Use technology and information resources to research issues in security management.
Write clearly and concisely about the theories of security management using proper writing mechanics and technical style conventions.

CIS 502 Week 6 Discussion Questions – Strayer University New

CIS/502 Week 6 Discussion Questions – Strayer New

Click On The Link Below to Purchase A+ Graded Material
Instant Download

http://www.hwgala.com/CIS-502-Week-6-Discussion-Questions-Strayer-New-CIS502W6D.htm

Week 6 DQ 1
“Computer Crime and Forensic Analysis” Please respond to the following:
• Provide two examples to distinguish the difference between what is considered a computer crime and what is not. Hypothesize why a person may commit a computer crime.
• Evaluate computer forensic analysis procedures and techniques, and describe a forensic analysis methodology you would conduct when a forensic case had been reported.

Week 6 DQ 2
“Incident Response and Compliances” Please respond to the following:
• Give an example of a recent well-known security incident and suggest the incident response procedures that the organization followed or should have followed to mitigate risk in regard to the example cited.
• From the e-Activity, decide if legislation and regulations have had the intended impact on the legal and ethical issues inherent in information security. Cite all sources.

CIS 502 Week 5 Discussion Questions – Strayer University New

CIS/502 Week 5 Discussion Questions – Strayer New

Click On The Link Below to Purchase A+ Graded Material
Instant Download

http://www.hwgala.com/CIS-502-Week-5-Discussion-Questions-Strayer-New-CIS502W5D.htm

Week 5 DQ 1
“Applications of Cryptography” Please respond to the following:
• When applying cryptography, determine why securing the key is more important than securing plaintext or ciphertext. Explain this in terms of how many messages would be compromised if the key is not secure.
• Evaluate symmetric and asymmetric cryptography technologies. Discuss the advantages and disadvantages of each, and conclude why we use both. Give an example to support your response.

Week 5 DQ 2
“Cryptanalysis” Please respond to the following:
• Examine the importance of cryptanalysis. Choose a method of cryptanalytic attack, and describe the method and the inherent strengths and weaknesses of the chosen method.
• From the e-Activity, examine the issue of email security and describe how to use cryptography to maintain email security.