QUESTION 1

i. Give explanation for Network Security

ii. Give explanation Security mechanism

iii. What do you comprehend by threat

iv. Name two defects of GSM networks

v. Explain the DDoS attacks

vi. Name three difficulties in IPv4 that were initially addressed in IPv6.

vii. Three aspects of IPsec are integrity, authentication and privacy. Which aspect(s) can be dealt with through IPsec AH?

viii. Put in plain words what is meant by the term ‘single sign-on' in the context of access control?

ix. Grade each of the following as a violation of confidentiality, integrity, availability or some blend of these.

1. Sam steals Sally's assignment

2. Sam crashes Sally's system

3. Sam amends his appraisal score on his company's performance management system where he is the administrator.

 Elucidate the 5 detailed services of data integrity regarding the assurance of data received.

QUESTION 2

(a) Your organization has a pressing necessitates to implement a process for managing accesses of users following many issues regarding punter provisioning, de-provisioning and access management. You are asked to identify an appropriate control model to solve this problem. Describe the reasons over the selected solution.

(b) Put in plain words that how dual signature used in the Secure Electronic Transaction (SET) protocol allows privacy, that is,the merchant can see only the order information and the bank can use right of entry only the payment information.

(c) The vast majority of traffic in computer networks is unicast traffic. For applications that necessitate the same data being distributed to many recipients, a more suitable form of communication is obtainable. What is it and how it works?

QUESTION 3

(a) Explicate the importance of Encryption and its limitations.

(b) Give details the functioning of IPSec.

(c) In a world with a variety of communicating channels, cryptography is a tool for providing network security. How far Public Key Cryptography addresses this sanctuary requirement?

QUESTION 4

You are the IT Manager of a company which has put in place a firewall to protect its connection to the internet. Few workers have attached the modem of their desktop to their office telephone line to enable connection (link) to their office desktop from home.

(a) You are asked to ascertain if this is a possible risk for the company. Give good reason for your respond.

(b) While attempting to remove the modems, you are countenanced with resistance by those employees. They tell you that it is a business obligation for them as they need any time access to their information. What immediate action should you take considering your answer to (a) above.

(c) Following this incident, management has requested you to implement a solution to enable these workforces to work from home when needed. How would you address this situation and which protocol will you choose as appropriate? Your responds should mention the causes for not choosing other explanations.