🏷️ LIMITED TIME OFFER: GET 20% OFF GRADE+ YEARLY SUBSCRIPTION →
Log in
HomeTextbook Notes300,000US110,000

PRINCIPLES OF INFORMATION SECURITY Chapter Notes -Public Key Infrastructure, Dns Spoofing, Public Key Certificate

15 views2 pages
tagriv
30 Jun 2022
School
Keiser University
Department
Computer Science
Course
PRINCIPLES OF INFORMATION SECURITY
Professor

For unlimited access to Textbook Notes, a Class+ subscription is required.

Document Summary

You can go through the process of creating a key pier to send to with the public to get signed and that"s how it confirms that it"s really them. We then watch the video on what is p ki public key infrastructure and what i took from this video was. Pki is now used by businesses to handle security through encryption. People, devices, and apps can all use these keys. Pki security was first introduced in the 1990s to aid in the administration of encryption keys via the issue and management of digital certificates. To assist preserve security, these pki certificates validate the owner of a private key and the authenticity of that relationship in the future. For the digital world, the certificates are similar to a driver"s license or passport. We then watch the video on dns attacks. A dns attack is a type of hack that takes advantage of flaws in the domain name system.

Get access

Grade+20% off
$8 USD/m$10 USD/m
Billed $96 USD annually
Grade+
Homework Help
Study Guides
Textbook Solutions
Class Notes
Textbook Notes
Booster Class
40 Verified Answers
Class+
$8 USD/m
Billed $96 USD annually
Class+
Homework Help
Study Guides
Textbook Solutions
Class Notes
Textbook Notes
Booster Class
30 Verified Answers

Related Documents

PRINCIPLES OF INFORMATION SECURITY Chapter Notes -Advanced Encryption Standard, Computer Hardware, Key Distribution
tagriv
PRINCIPLES OF INFORMATION SECURITY Chapter Notes -Rogue Access Point, Wireless Access Point, Bluejacking
tagriv
PRINCIPLES OF INFORMATION SECURITY Chapter Notes -Local Area Network, Intrusion Detection System, File Transfer Protocol
tagriv

Related Questions

Ann, a CIRT member, is conducting incident response activities on a network that consists of several hundred virtual servers and thousands of endpoints and end users. The network generates more than 10,000 log messages per second. The enterprise belongs to a large, web-based cryptocurrency startup. Ann has disabled the relevant information into an easily digestible report for executive management. However, she still needs to collect evidence of the intrusion that caused the incident. Which of the following should Ann use to gather the required information?

  1. Traffic interceptor log analysis
  2. Log reduction and visualization tools
  3. Proof of work analysis
  4. Ledger analysis software

 

Ans A : And Justification 

ANS A. Ann, a CIRT member, is conducting incident response activities on a network that consists of several hundred virtual servers and thousands of endpoints and end users. The network generates more than 10,000 log messages per second. The enterprise belongs to a large, web-based cryptocurrency startup. Ann has disabled the relevant information into an easily digestible report for executive management. However, she still needs to collect evidence of the intrusion that caused the incident. Which of the following should Ann use to gather the required information :-

- Traffic interceptor log analysis

 

Ans Option B

Log reduction and visualization tools

Based on the given information this is the correct answer

 

Ans : correct answer is proof of work analysis

because when Ann has distilled the relevant information into an easily digestable report for executive manager then their is a need to be any proof of that incident to be post on a network and basically several hundred virtual servers are connected and cryptocurrency startup so, proof of work analysis plays an important role here.

 

confused : Please suggest 

All staff at a company have started working remotely due to a global pandemic. To transition to remote work, the company has migrated to SaaS collaboration tools. The human resources department wants to use these tools to process sensitive information but is concerned the data could be:

Leaked to the media via printing of the documents

Sent to a personal email address

Accessed and viewed by systems administrators

Uploaded to a file storage site

Which of the following would mitigate the department's concerns?

Options:
A. Data loss detection, reverse proxy, EDR, and PGP
B. VDI, proxy, CASB, and DRM
C. Watermarking, forward proxy, DLP, and MFA
D. Proxy, secure VPN, endpoint encryption, and AV

E-LI and Shilpa : 

both of you suggested option B is the answer now Shilpa is saying option A and E-Li i did not understand you last clarification are you saying option D ?????

A systems administrator is preparing to run a vulnerability scan on a set of information systems in the organization. The systems administrator wants to ensure that the targeted systems produce accurate information especially regarding configuration settings.

Which of the following scan types will provide the systems administrator with the MOST accurate information?

  1. A passive, credentialed scan
    B. A passive, non-credentialed scan
    C. An active, non-credentialed scan
    D. An active, credentialed scan