Information Security: Principles and Practices 2nd Edition by Jim Breithaupt, Mark S. Merkow

Exercise 6

Interview a Network Administrator

1. Interview a network administrator at your company or school to learn about the type of security controls in place on your network.

2. What types of firewalls are used? For what purposes?

3. Are intrusion detection systems present? Who monitors them?

4. Ask the network manager what different methods are used to protect the networks that operate the school’s record-keeping systems versus the network that’s open for student educational uses.

5. Which security posture is adopted on which network segments?

Step 1 of 5

1. In an interview with a network administrator at the company or an school the following types of security controls must be taken in place at the network:

• In company’s and schools as most of the employees and students make wide use of the USB ports to fetch and store data thus port scans are mainly the target of the vulnerability thus controls such as firewall, Intrusion detection system, running few of the services as possible and replying to what is necessary.

• In Social engineering the controls including the education, user awareness various procedures and policies must be taken.

• In case of vulnerability such as impersonation, guessing, eavesdropping, spoofing and man-in the middle attack the control such as strong and one-time authentication, use of virtual private network and various protocol analyses must be taken.