Part 1

1. RESPONSE SHOULD BE AT LEAST 200 WORDS IN LENGTH

• Describe the CIA Triad and give an example of how it is used.

• Explain how laws affect information security professionals, and give an example of how they are used.

• Explain how regulations affect information security professionals, and give an example of how they are used.

• Discuss three best practices for network defense and give an example of each on how it is used.

Part 2

RESPONSE SHOULD BE AT LEAST 200 WORDS IN LENGTH

• What are an Intrusion Detection, and a Prevention Systems? Elaborate on the differences between the them.

• Describe the Signature-Detection Model and its advantages.

• Explain what a virtual machine is and give an example of how it is used.

• Explain security concerns as it relates to cloud services.

Part 3

Response should be at least 75 words in length

• Define Whitelisting and Blacklisting.

• Define SQL Injection. How would you use SQL Injection to increase security?

• Define Integer Overflows and how to avoid Integer Overflow vulnerabilities.

• Explain the Java Language and why we use it.

• List the pieces in association with the J2EE architecture and elaborate on what each piece does.

• Define Buffer Overflows and how to avoid Buffer Overflow vulnerabilities.

• Define J2EE authentication.

• Define Java Authentication and Authorization Services (JAAS).

Part 4

RESPONSE SHOULD BE AT LEAST 75 WORDS IN LENGTH

• What is controlling application communications and provide an example?

• What is role based security? Compare .NET's role-based security and role-based security of Windows.

• What is business continuity planning and the four components?

• What is the definition of high availability and how it is related to redundancy?

• What is a physical vulnerability assessment and provide an example?

• What is managed code? How is managed code useful for IT?

• What are the core security features of .NET? Briefly explain the use of .NET.

• What is forensics and briefly explain a process for performing digital forensics?

Part 5

PowerPoint Presentation

You are the CIO of an organization. You are briefing new IT employees that are going to be directly under your Supervision. Develop a PowerPoint presentation on IT physical security referencing your textbook concerning the many things you would want your subordinates to be aware of. Your presentation should be no longer than 15 slides and in APA format.

Components of the presentation include the following:

1. Include IT physical security.

2. Be a minimum of 12 slides and a maximum of 15 slides, not including the title or reference slides.

3. Include pictures in your presentation, and use at least two other sources other than your textbook for yourpresentation information.

4. Include between 5 and 6 abbreviated bullets for each slide - approximately 24-point font.

5. Your presentation should be written in APA style writing with appropriate citations.

6. Include a title slide at the beginning of your presentation and a references slide at the end of your presentation for your resources.

When creating the presentation, craft it in a "business professional" manner with appropriate text proportions, consistent and professional font, and appropriate images to present your information. While some features of PowerPoint may be "cool" or good at catching attention, it may not be suitable for presenting professional information.

Part 6

PowerPoint Presentation

Executive Brief on Writing Secure Software or J2EE

Create a PowerPoint presentation on Writing Secure Software, or J2EE for your supervisor. Your supervisor wants you to present information to the top level executives as it relates to securing the company's web-based applications that generate revenue for the organization. You may create a fictitious company if you prefer. Within this presentation you will focus on giving executives fluency as it relates to the two reading assignments for this unit. Your presentation should not be more than 15 slides. Remember to cite your information in APA format for this project.

Components of the presentation include the following:

1. Describe J2EE, and securing the company's web-based applications that generate revenue for the organization.

2. Be a minimum of 12 slides and a maximum of 15 slides, not including the title or reference slides.

3. Include pictures in your presentation, and use at least two other sources other than your textbook for your presentation information.

4. Include between five and six abbreviated bullets for each slide, approximately 24-point font.

5. Your presentation should be written in APA style with appropriate citations and references.

6. Include a title slide at the beginning of your presentation and a references slide at the end of your presentation for your resources.

When creating the presentation, craft it in a "business professional" manner with appropriate text proportions, consistent and professional font, and appropriate images to present your information. While some features of PowerPoint may be "cool" or good at catching attention, it may not be suitable for presenting professional information and driving home your point.

Part 7

RESPONSE SHOULD BE AT LEAST 150 WORDS

• War driving is a wireless attack. Describe at least four war driving tools and the purpose of each.

• Define access control, and list the four access control models. Describe and name the four basic steps in access control, give the computer access of each, and provide a scenario example.

• Passwords can be attacked by many different avenues. Name and describe three attacks against passwords. What are some of the network defenses against such attacks? Provide a brief description of each.

• List the account management procedures for securing passwords. Group policy settings allow administrators to set password restrictions on an entire group at the same time. List the attributes, include a description, and recommended settings for this procedure.