A network administrator at Trendy Distributors identifies sensitive files being transferred from a Local Area Network (LAN) workstation to an unauthorised outside IP address in a foreign country. An investigation determines that the firewall has not been altered, and the anti-virus on the workstation is up-to-date. What could be the MOST likely explanation for this?

A network administrator at Trendy Distributors identifies sensitive files being transferred from a Local Area Network (LAN) workstation to an unauthorised outside IP address in a foreign country. An investigation determines that the firewall has not been altered, and the anti-virus on the workstation is up-to-date. What could be the MOST likely explanation for this?

The software testers who perform an audit are given access to the Tech Distributors’ facility and network. The testers will not be given access to the details of the custom-developed software the customer uses. However, the testers will also have access to the source code for several open-source applications and networking equipment used at the facility. These items will be within the scope of the audit. Establish and describe the appropriate software testing methods for this audit.

The security manager at TwoUp Technologies’ primary role is implementing cybersecurity functions and strategising how IT services should be governed to fulfil business needs. The IT and cybersecurity framework can shape company policies by providing procedures, activities, checklists, and technologies that should be implemented. Describe the four categories governing an organisation’s system or data asset to meet the CIA triad and non-repudiation properties.

A supply management director of Tech Distributors is sending a payment confirmation email to one of the organisation’s regional managers. The organisation experienced a security breach when the company network was attacked by one of the employees who had plugged in a virus-infected external storage device. The company experienced a data breach of confidential customer and supplier financial details. To improve communication security and prevent breaches in the future, all communications with regional offices must be encrypted. The director has sent the encrypted email message below to a regional manager. Delineate cryptography and use the ROT13 substitution cipher to decrypt the message. Cnlzrag unf orra rssrpgrq

A supply management director of Tech Distributors is sending a payment confirmation email to one of the organisation’s regional managers. The organisation experienced a security breach when the company network was attacked by one of the employees who had plugged in a virus-infected external storage device. The company experienced a data breach of confidential customer and supplier financial details. To improve communication security and prevent breaches in the future, all communications with regional offices must be encrypted. The director has sent the encrypted email message below to a regional manager. Delineate cryptography and use the ROT13 substitution cipher to decrypt the message. Cnlzrag unf orra rssrpgrq

The security manager at TwoUp Technologies’ primary role is implementing cybersecurity functions and strategising how IT services should be governed to fulfil business needs. The IT and cybersecurity framework can shape company policies by providing procedures, activities, checklists, and technologies that should be implemented. Describe the four categories governing an organisation’s system or data asset to meet the CIA triad and non-repudiation properties.

TwoUp Technologies employees have been using simple, easy-to-remember passwords, opening the company software, and making the network vulnerable to attacks. The company has experienced network attacks and data breaches in the past year. To implement security control strategies, the security manager must identify security risks within the organisation. The security manager explained to management the impact of this vulnerability and recommended eliminating unsecured networks. Expound on the different local and remote methods that attackers can use to gain access to the company network. Give an example of each path.

Modern cybersecurity threats have become sophisticated, making the ability to   describe and analyse threat behaviour necessary. Describe how you would analyse   cybersecurity threats in an organisation.