Reference no: EM131614848

Discussion 1. "Root Access and Automated Assessment Tools"

Please respond to the following:

• Evaluate the reason for the limited use of the root or superuser account in Linux. Determine why you believe, by default, this account is so cautiously guarded in comparison to Windows operating systems. Provide a rationale with your response.

• From the e-Activity, discuss the tool's primary uses, strengths and weaknesses, competing products, costs, system requirements, and whether hackers and / or security personnel commonly use the tool. Decide whether or not as a security manager you would consider the use of this tool for your team. Provide a rationale with your response.

E-Activity: Use the Internet to research at least one commonly used Linux automated assessment tool. Pay close attention to the tool's primary uses, strengths and weaknesses, competing products, costs, system requirements, and whether hackers and / or security personnel commonly use the tool.

Discussion 2. "Analyzing Incident Response"

Please respond to the following:

• Explain in your own words the importance of keeping an Incident Response Plan (IRP) up-to-date with changes in a business. Hypothesize what you believe to be the greatest reason for a corporation to not have an updated IRP and explain the potential issues this could create.

• Imagine you are a chief information security officer (CISO) for a large corporation. Propose communication procedures you would consider utilizing for incident response, such as when to provide communication, and who you believe would be privy to those communications based on the need to know.

Discussion 3. "Security Controls and the Business"

Please respond to the following:

• Discuss in your own words the importance of balancing security and business functionality. Determine why upper management buy-in for a security program is essential for the program's success and compliance of end users.

• Evaluate why administrative, technical, and physical controls need to be implemented in tandem for a security program to be effective and determine which of these control sets you believe is the most important. Justify your response.

Discussion 4. "IDS"

Please respond to the following:

• Compare and contrast network-based and host-based IDS use in an enterprise. Determine the feasibility and necessity of utilizing one of these IDS implementations over the others and explain which you feel is more important and advantageous in an enterprise setting.

• From the e-Activity, discuss the tool's primary uses, strengths and weaknesses, competing products, costs, and system requirements. Explain why you would or wouldn't consider implementing this product in your organization. Justify your response.

E-Activity: Use the Internet or the Strayer Library to research at least one commonly used intrusion detection tool. Pay close attention to the tool's primary uses, strengths and weaknesses, competing products, costs, and system requirements. Be prepared to discuss.