System Development Life Cycle: Phase III – Design
January 27, 2023
Information Governance
January 27, 2023

IT Security questions

Instructions· When composing your answers, be thorough. The more complete your answer, the higher your score will be. Be sure to identify any assumptions you are making in developing your answers and describe how your answer would change if the assumptions were different. For multiple choice questions if you think there are two correct answers choosethe best oneand justify your answer with reference.  Please do notreproduceor justrearrange the wordsin the question as an answer but try to give some deeper logical reason. Use the spell check and other methods of writing correct and good English. [It will help me too to improve my English]· While composing your answers, especially for the conclusions or the facts please support your answers, carefully cite your sources.  If citing books include page numbers. I expect you to first get the answers from the OER, session notes and then other sources. If you are citing lessons, cite as (Session n). The session lectures are not developed 100% by me, so please avoid citing me as the author. Remember, failure to cite sources constitutes an academic integrity violation.· Use APA format (so far, I have not penalized. But I expect you to follow it for the final)Part I Q1-10 (5 points each), choose best one, Please provide reason of your choice in a few sentences,in your own wordsand/or reasons not choosing the other choices. Restating the problem in your own words does not constitute as the reason. Sometimes defining the terms may give you a clue to the reason.1. What piece of legislation allows computer records documenting criminal activity to be used in court?a. National Infrastructure Protection Actb. Federal Computer Documents Rule 703(a)c. Digital Signature Billd. Federal Rules of Evidence 803(6)Reason:2. How should you NOT report computer crime?a. telephoneb. e-mailc. tell management in persond. tell the IT department in person___Reason:3. What is most often overlooked when planning for information security?a. firewallsb. educationc. virus scansd. electronic surveillance___Reason:4.  Which of the following are the reason for the difficulties in prosecutions of computer-related crimes?1. The area of litigation is extremely technical and difficult to understand.2. Most of the crimes do not fall under any of the current laws3. The laws themselves are relatively new and untested.4. The technology is very dynamic, and the tactics of the perpetrators are constantly changing.a. 1 and 2b. 1, 2 and 3c. 1, 2 and 4d. 1, 3 and 4___Reason:5. What is authentication?a. the act of binding an entity to a representation of identityb. the act of ensuring that information is being sent securelyc. the act of ensuring that the receiver of information actually received itd. the act of binding a computer system to a network___Reason6. What is not considered the misuse of information?a. the untimely release of secret informationb. the deletion of information from a systemc. the illegal sale of information to rival companiesd. the misrepresentation of information___Reason:7. How does a client machine find the web address associated with a particular URL?e. It uses translation software in the interpreter.a. It sends a message to the nearest domain name server.b. It uses hashing to translate the address.c. It sends a message to the URL server.___Reason:8. What defines the strength of a cryptographic method?a. number of shiftsb. need for a code bookc. complexity of the algorithmd. length of time needed to crack it___Reason:9. Which security solution isbestfor protecting the information system connected to the Internet?a. virus scanning softwareb. encryptionc. biometric authenticationd. firewalls___Reason:10. Which part of CAIN is realized through the use of message digest functions and hashes? Give one reasona. confidentialityb. authenticityc. integrityd. non-repudiation___Reason:Part II Q1-3 (Each 10 points)QII.1 For a public-key encryption system, list reasons,1) in favor of2) and againstfor using the same key pair for 1) the encryption and for 2) the digital signatureQII.2 Describe “inference controls”Give reasons why they are needed.And give specific examples (at least 3), andDescribe how the inference controls are implemented; how they serve the purpose (effective) in a database.QII.3  Suppose your spy colleague wanted to send you messages that you could be sure came from him (and not an enemy trying to pretend to be him). What CAIN property is that? Your colleague tells you: “Whenever I send you a message, the last thing in the message will be a number. That number will be a count of the number of letter E’s in the message. If you get a message, and the number at the end is NOT an accurate count of the number of letter E’s, that message is from an imposter.” [a, b, c: 2 points, d: 4 points]a) This number, put at the end of each message, is an example of what cryptographic item?b) Does it have the characteristic of being one way i.e can you deduce the original message?c) Is it collision resistant?d) Can you suggest some other way to indicate that message is from the sender without encryption?Part 3: Essay Question.Maximum length: 900 words, (weight 20 pts.)An enterprising group of entrepreneurs is starting a new data storage and retrieval business, SecureStore, Inc. For a fee, the new company will accept digitalized data (text and images, multimedia), and store it on hard drives until needed by the customer. Customer data will be transmitted to and from SecureStore over the Internet. SecureStore guarantees that the confidentiality and integrity of the data will be maintained.SecureStore also envisions certain information assurance requirements for their internal operations. Company employees will need to exchange confidential email and will need a mechanism for verifying the integrity and originator of some email messages. Also, SecureStore intends a daily backup of all customer data to a remote facility via a leased line. They wish to do so as economically as possible, while ensuring the data’s confidentiality and integrity.SecureStore is interviewing candidates for the position of Chief Information Officer (CIO). They are asking candidates to describe briefly how they would satisfy Secure Store’s requirements as stated above. How would a successful candidate respond?First, list the requirements gleaned from the above statements; once you have them then please address each requirement in a separate paragraph. Keep in mind that this business will be operating in the real world, which means please pay attention to economics.

 
Do you need a similar assignment done for you from scratch? We have qualified writers to help you. We assure you an A+ quality paper that is free from plagiarism. Order now for an Amazing Discount!
Use Discount Code "Newclient" for a 15% Discount!

NB: We do not resell papers. Upon ordering, we do an original paper exclusively for you.