Question: In this case study we will consider a network administrator for a small, family-oriented video store. The store is not part of a chain of stores and has a very limited security budget. It has five machines for employees to use to check out movies and one server on which to keep centralized records. That server is in the manager's office. The administrator takes the following security precautions:

1. Each machine is upgraded to Windows XP, with the personal firewall turned on.

2. Antivirus software was installed on all machines.

3. A tape backup is added to the server, and tapes are kept in a file cabinet in the manager's office.

4. Internet access to employee machines is removed.

Now consider these questions:

1. What did these actions accomplish?

2. What additional actions might you recommend?