__An alert or intrusion is an indication that a system has just been attacked or is under attack. ____


F
alarm


List and describe at least four reasons to acquire and use an IDPS (Intrusion Detection Prevention System)
Picking Double Doorknobs Does Apply




To prevent problem behaviors by increasing the perceived risk of discovery and punishment for those who would attack or otherwise abuse the system.
To detect attacks and other security violations that are not prevented by other security measures.
To detect and deal with preambles to attacks (commonly experienced as network probes and other "doorknob rattling" activities).
To document the existing threat to an organization.
To act as quality control for security design and administration, especially in large and complex enterprises.
To provide useful information about intrusions that do take place, allowing improved diagnsis, recovery, and correction of causative factors.



Describe how hash functions work and what they are used for.


Hash functions are mathematical algorithms that generate a message summary or digest (sometimes called a fingerprint) to confirm the identity of a specific message and to confirm that there have not beeen any changes to the content. While they do not create a cipherteext, hash functions confirm message identity and integrity, both of which are critical functions in e-commerce. Hash algorithms sre public functions that create a hash value, also known as a message digest, by converting variable-length messages into a single fixed length value. The message digest is a fingerprint of the author's message. If both hashes are identical after transmission, the message always provides the same hash value, but the hash value itself cannot be used to determine the contents of the message.  Hashing functions so not require the use of keys, but it is possible to attach a message suthentication code (MAC)- a key-dependent, one-way hash function-that allows only specific recipients (symmetric key holders) to access the message digest. Because hash functions are one-wy, they are used in password verification systems to confirm the identity of the user.. In such systems, the hash value, or message digest is stored for later comparison. When the user logs on for the next session, the system calculates a hash value based on the user's password input, and this value is compared against the stored value to confirm identity.


Describe symmetric and asymmetric encryptions.


Symmetric and asymmetric algorithms are distinguised by the types of keys they use for encryption and decryption operations.
Symmetric encryption methodologies require the same secret key to encipher and decipher the messages- also call private key encryption. They use mathematical operations that can be programmed into extremely fast computing algorithms so that the  encryption and decryption processes are executed quickly even by small computers. Bothn sender and receiver must have the secret key. passage of key must be out of band to avoid interception.
Asymmetric encryption systems use two different but related keys, and either can be used to encrypt or decrypt the message, but in only one direction...A to B or B to A. Usually one key is private and one is public, hence the other name of public-key encryption


Identify the "Seven Major Sources of Physical Loss”


1. Extreme temperature: heat, cold.
2. Gases: war gases, commercial vapors, humid or dry air, suspended particles
3. Liquids: water, chemicals
4. Living organisms: viruses, bacteria, people, animals,insects
5. Projectiles: tangible objects in motion, powered objects
6. Movement: collapse, shearing, shaking, vibration, liquefaction, flow waves, separation, slide
7. Energy anomalies: electrical surge or failure, magnetism, static electricity, aging circuitry; radiation, sound, light, radio, microwave, electromagnetic, atomic


What are the major steps in executing the project plan?


Planning the project
Suoervising tasks and action steps
Wrapping up
The project plan can be developed in any number of ways. Each organization has to determine its own project management methodology for IT and information security projects. Whenever possible, information security projects should follow the organization's project management practices.


What major project tasks does the WBS document? (Work Breakdown Structure)


Work to be accomlished (activities and deliverables)
Individuals (or skill set) assigned to perform the task
Start and end dates for the task (when known)
Amount of effort required for completeion in hours or work days
Estimated capital expenses for the task
Estimated noncapital expenses for the task
Identification of dependencies between and among tasks



What tasks must be performed when an employee prepares to leave an organization?


Access to the organization's systems must be disabled
Removable media must be returned
Hard drives must be secured
File cabinet locks must be changed
Office door locks must be changed
Keycard access must be revoked
Personal effects must be removed from the organization's premises.



Describe the concept of separation of duties.


Separation of duties is used to reduce the chance of an individual violating informtion security and breaching confidentiality, integrity, or availability of information. The control stipulates that the completion of a significant task that involves sensitive information should require at leats two people. idea, if only one person had the authorization to access certain information, there may be nothing the org can do to prevent this individual from copying the info and removing it from the premises.


List the five domains of the recommended maintenance model.


External monitoring
Internal monitoring
Planning and risk assessment
Vulnerability assessment and remediation
Readiness and review