Computers and Technology

Describe the environment (mentioned in the scenario below) and include (draw) a network diagram.
Acme Enterprise Systems (AES) has hired you to perform a security risk assessment on their networks. They are interested in determining where their weak spots are, what kinds of risk those weak spots areas pose, and what they can do about them (on a budget).
AES has 75 employees, to include: Accounting/Backoffice, Software Developers, and Sales.
AES has a headquarters office in Maitland Florida, with a regional office in Jacksonville and Tampa. Each site is connected together over a VPN to allow for one cohesive network. AES develops a software product called BIRDS. BIRDS is a web-based software-as-a-solution product they host out of their primary office in Maitland. The web server infrastructure consists of 3 large servers, each of which runs a web server and database server (there are three for scaling).
The IT Director has one IT Administrator to help him secure and operate the networks. Upon questioning, they did not know what the CIS standards were. They use a Windows domain controller but have not applied any group policy. Each user in the network has local administrator accounts. The only end-point control applied appears to be Windows Defender for Antivirus. The IT director can VPN into the network from home, no 2FA. No audit of expired user accounts has ever been performed.
On the network: The environment consists of about 100 machines. There is no segmentation between any networks, including the web infrastructure. On inspection, it was found that the firewalls were all unpatched and had been for several years. They have a Dell Sonicwall at each site and they use a SonicPoint access point at each site for Wireless access. The Wireless network is secured using WEP and MAC Filtering.
In speaking with the developers, it was discovered that they are developing custom software in PHP without using any frameworks. Developers had no knowledge of secure coding practices or security in general.
All user-work is done using laptops over wifi.
Acme was recently hit with a CryptoLocker variant that spread through their entire enterprise, encrypting all their files and source code. They were forced to pay roughly $5000 in ransoms because they had no recent back-ups to restore from.
Acme is a very typical company who has not thought about security. Using the information gathered so far, provide ACME with a comprehensive report and roadmap to improve their security posture.

answer
Answers: 3

Other questions on the subject: Computers and Technology

image
Computers and Technology, 22.06.2019 10:10, joanasprinkman2262
3. bob is arguing that if you use output feedback (ofb) mode twice in a row to encrypt a long message, m, using the same key each time, it will be more secure. explain why bob is wrong, no matter what encryption algorithm he is using for block encryption (15 points).
Answers: 3
image
Computers and Technology, 22.06.2019 20:30, fickllyd000
In this lab, you complete a prewritten c program that calculates an employee’s productivity bonus and prints the employee’s name and bonus. bonuses are calculated based on an employee’s productivity score as shown below. a productivity score is calculated by first dividing an employee’s transactions dollar value by the number of transactions and then dividing the result by the number of shifts worked.
Answers: 3
image
Computers and Technology, 23.06.2019 05:20, reeeeeee32
What did creator markus “notch" persson initially call his game
Answers: 1
image
Computers and Technology, 23.06.2019 21:30, shadoris26
To move a file or folder in microsoft windows, you can click and hold down the left mouse button while moving your mouse pointer to the location you want the file or folder to be, which is also known as.
Answers: 3
Do you know the correct answer?
Describe the environment (mentioned in the scenario below) and include (draw) a network diagram.

Questions in other subjects: