Scribd Logo
Upload

Welcome to Scribd!

  • 1K views

    NT2580, Week 1 Worksheet 1

    Uploaded by

    MahlikBrown
    NT2580: Unit 1 Match Risks / threats to solutions. Write the letter of the correct solution or preventative action for each risk or threat. Implement daily data backups and off-site data storage for monthly data archiving.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    NT2580, Week 1 Worksheet 1

    Uploaded by

    MahlikBrown
    1K views2 pages
    NT2580: Unit 1 Match Risks / threats to solutions. Write the letter of the correct solution or preventative action for each risk or threat. Implement daily data backups and off-site data storage for monthly data archiving.

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    NT2580: Unit 1 Match Risks / threats to solutions. Write the letter of the correct solution or preventative action for each risk or threat. Implement daily data backups and off-site data storage for monthly data archiving.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    1K views2 pages

    NT2580, Week 1 Worksheet 1

    Uploaded by

    MahlikBrown
    NT2580: Unit 1 Match Risks / threats to solutions. Write the letter of the correct solution or preventative action for each risk or threat. Implement daily data backups and off-site data storage for monthly data archiving.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    You are on page 1of 2

    NT2580: Unit 1 Match Risks/Threats to Solutions

    ITT Educational Services Page 1




    Name: __________________________________________________

    Instructions:
    You are presented with a list of some risks and threats associated with the seven domains of a typical IT
    infrastructure. Below the list, the solutions or preventive actions to manage those risks and threats are
    listed.

    Write the letter of the correct solution or preventative action in the blank to the right of each risk or threat.

    Risks or threats:
    1. Violation of a security policy by a user ________
    2. Disgruntled employee sabotage ________
    3. Download of non-business videos using the
    Internet to an employer-owned computer ________
    4. Malware infection of a users laptop ________
    5. Unauthorized physical access to the LAN ________
    6. LAN server operating system vulnerabilities ________
    7. Download of unknown file types from unknown sources by local users ________
    8. Errors and weaknesses of network router, firewall, and network
    appliance configuration file ________
    9. WAN eavesdropping ________
    10. WAN Denial of Service (DoS) or Distributed Denial of
    Service (DDoS) attacks ________
    11. Confidential data compromised remotely ________
    12. Mobile worker token stolen ________
    13. Corrupt or lost data ________
    14. Downtime of customer database ________

    Solutions or preventative actions:
    A. Enable content filtering and antivirus scanning at the entry and exit points of the Internet. Enable
    workstation auto-scans and auto-quarantine for unknown file types.
    B. Apply file transfer monitoring, scanning, and alarming for unknown file types and sources.
    C. Place employee on probation, review acceptable use policy (AUP) and employee manual, and
    discuss status during performance reviews.
    D. Apply filters on exterior Internet Protocol (IP) stateful firewalls and IP router WAN interfaces.
    Davonte Brown
    c
    i
    a
    l
    n
    f
    b
    h
    m
    d
    k
    g
    e
    j
    NT2580: Unit 1 Match Risks/Threats to Solutions
    ITT Educational Services Page 2
    E. Implement daily data backups and off-site data storage for monthly data archiving. Define data
    recovery procedures based on defined Recovery Time Objectives (RTOs).
    F. Define vulnerability window policies, standards, procedures, and guidelines. Conduct LAN domain
    vulnerability assessments.
    G. Apply real-time lockout procedures.
    H. Define a strict zero-day vulnerability window definition. Update devices with security fixes and
    software patches right away.
    I. Track and monitor abnormal employee behavior, erratic job performance, and use of IT
    infrastructure during off-hours. Begin IT access control lockout procedures based on AUP
    monitoring and compliance.
    J. Develop a disaster recovery plan (DRP) specific to the recovery of mission-critical applications
    and data to maintain operations.
    K. Encrypt all confidential data in the database or hard drive.
    L. Use workstation antivirus and malicious code policies, standards, procedures, and guidelines.
    Enable an automated antivirus protection solution that scans and updates individual workstations
    with proper protection.
    M. Use encryption and virtual private network (VPN) tunneling for secure IP communications.
    N. Make sure wiring closets, data centers, and computer rooms are secure. Provide no access
    without proper credentials.

    You might also like