Match common encryption algorithms and methods with the scenarios representing real-world business applications and requirements.?

Question

Hello All,

I want to thank you in advance, I was wondering if someone can help me with my fundamentals of information systems security questions.

Question 10 pts

Shovels and Shingles is a small construction company consisting of 12 computers that have Internet access. The company's biggest concern is that a wily competitor will send e-mail messages pretending to be from Shovels and Shingles in order to get confidential information. Select an encryption solution (SSL, Digital Signature, or AES) that best prevents a competitor from receiving confidential information and justify the recommendation.

Question 10 pts

Top Ads is a small advertising company consisting of 12 computers that have Internet access. All employees communicate using smartphones. Top Ads' primary concern is protecting the data on the smartphones. Select an encryption solution (SSL, Digital Signature, or AES) that best protects the smartphones and justify the recommendation.

Question 10 pts

Backordered Parts is a defense contractor that builds communications parts for the military. The employees use mostly Web-based applications for parts design and information sharing. Due to the sensitive nature of the business, Backordered Parts would like to implement a solution that secures all browser connections to the Web servers. Select an encryption solution (SSL, Digital Signature, or AES) that best meets the company's needs and justify the recommendation.

Answer 1

From the choice, Shovels and Shingles would use digital signatures on email. Actually implementing that is a pain in the neck, though. I'm not sure who the email is going to or from - both ends need to install compatible mail tools and set up the certificates. You might have noticed that no-one in the real world ever signs email except the odd computer nerd on security mailing lists.

If the mail is between two work-at-home employees, then yes this can work - they exchange S/MIME public keys face-to-face or via some trusted medium, then check that mail has the correct signature with the correct (Shingles) certificate authority. A little stamp comes up in the mail tool if it's OK.



Top Ads needs to issue smart phones that support data encryption and remote wipe, and make sure the employees turn it on and use reasonable passwords. Whatever algorithm the phone OS supports. AES is the relevant choice.



Backordered parts would use SSL like everyone else. If they are really worried, they would make sure they have SSL v2 disabled and only trusted algorithms enabled, and take some steps to ensure that the server certificate seen by the browsers is really the one issued to the server, and not some man-in-the-middle attack using a stolen chaining certificate or SSL-aware firewall spoofing it.

Answer 2

The techniques and, in most cases, the strategies are effective. However, a lot of the training methods are less than ideal. Kicking and punching the air for instance, or chambering the hand for no purpose. Using certain techniques as "blocks" when, in fact, they're not. Because of that, 90% of "traditional" martial arts schools will produce people who are less able to handle a real situation than those who train in a more realistic manner. A well-trained "traditional" martial artist could probably defeat an athletic individual with no training. In fact, it's almost certain.

Answer 3

confidential services Inc. is concerned that sensitive information may inadvertently be exposed and wants to implement a symmetric file encrytion algorithm that is strong but fast. select an encryption that best meets the company's needs and justify the recommendation

Answer 4

You can also make cash filling web surveys. I am doing $1800/month using this service: http://is.gd/myeasycash This can be a bit boring work but much better than working at KFC.