Reference no: EM132931330
Objeactive:
The objective of this assignment is to explore Information Security and Assurance(IS&A) concepts, identification attacks, and setting account policies. Through this assignment, you are required to do secondary research in addressing some of the challenge s you will encounter. The final submission must be in a report format (as per the sample p site d on blackboard).Deliverables: A single report document answering all listed questions or with results of activities. The final document must meet the submission requirements at the end of this document.
Part A:
Based on the course content, class discussion, and other research materials, discuss the following Information Security Risk Concept or statement:a.The re Is No Such Thing As Abs olute Se curity. At a minimum, 1 paragraph -Maximum 1-pagedocument
b.Se curity Through Obs curity Is Not an Ans we r. Why is security through obscurity a lousyidea for the overall security of a system? At a minimum, 1 paragraph -Maximum 1-pagedocument
c.Comple xity is the Ene my of Se curity. At a minimum, 1 paragraph -Maximum 1-pagedocument
d.Ope n Dis clos ure of Vulne rabilitie s Is Good for Se curity. At a minimum, 1 paragraph -Maximum 1-pagedocument
2.Visit opendns phishing-quiz and take the "ThinkYou Can Outsmart Internet Scammer?" quiz. Provide a screenshot of your results and details of the site you failed to spot (refer to figure 1 and 2).
In oneparagraph, discuss standardfeatures, which help identify possible electronic fraud. At a minimum, 2 paragraphs -Maximum 1-pagedocument
Part B For the first part of this assignment,you will select an operating system you currently have access to (a VM is fine,e.g. "Windows 2008 Svr01"). You will document via screenshots and written instructions, the processes you use to harden the OS. You must perform tenspecific hardening tasks thatmay be drawn from the lecture notes and class discussions or your repository of IT security tips and tricks. You will compile the screenshots (or other images) and step-by-step instructions into a single document that should read like a security configuration manual for the OS.
Attachment:- Information Security.rar