Expert Answers

Description Lab B - Computer and Network Discovery Lab Goals Use command line tools to discover information about your computer and network. Lab Purpose This lab will help to familiarize you with command line tools in Windows and Linux environments to gather information about your computer and network settings. Lab Instructions Follow these steps closely and take screenshots when prompted. You will need these screenshots for your lab report. Prerequisites: A Windows 10/11 system (physical or virtual machine). If you need a copy of Windows, you can download it from the Microsoft Azure Dev Tools for Teaching subscription, free for students. Sign up at https://myapps.asu.edu/app/microsoft-imagine. A Linux machine, such as Ubuntu 22.04 or newer (physical or virtual). You can download a copy of Ubuntu at https://ubuntu.com/download/desktop or https://ubuntu.com/download/server. Either version will work fine, but it is recommended to use the Desktop edition if you don’t have a lot of familiarity with the command line environment. Note: The commands provided below are examples and may vary slightly depending on the specific version of the operating system. Screenshot extensions in the examples described below are .png, but you can also use .jpg or .jpeg. Part 1 - Windows Command Line Tools System Information Open the command prompt (CMD) or PowerShell on your Windows system. Enter the command: systeminfo What this does: This command displays detailed information about the computer's hardware, operating system, and software configuration. Enter the command: echo “ ” Capture Screenshot: Take a screenshot of the command prompt or PowerShell window showing the executed commands and the resulting outputs. Save the screenshot with the filename format: YourName_LabB_Part1_Task1.extension (e.g., JohnDoe_LabB_Part1_Task1.png). Disk Space Enter the command: wmic logicaldisk get caption, freespace What this does: This command displays the available free space on each logical disk of your computer. Enter the command: echo “ ” Capture Screenshot: Take a screenshot of the command prompt or PowerShell window showing the executed commands and the resulting outputs. Save the screenshot with the filename format: YourName_LabB_Part1_Task2.extension (e.g., JohnDoe_LabB_Part1_Task2.png). Network Information Enter the command: ipconfig What this does: This command displays the IP configuration for all network interfaces on your Windows system. Enter the command: echo “ ” Capture Screenshot: Take a screenshot of the command prompt or PowerShell window showing the executed commands and the resulting outputs. Save the screenshot with the filename format: YourName_LabB_Part1_Task3.extension (e.g., JohnDoe_LabB_Part1_Task3.png). Network Connectivity Enter the command: ping google.com What this does: This command sends ICMP Echo Request packets to the specified destination (google.com) to test network connectivity. Enter the command: echo “ ” Capture Screenshot: Take a screenshot of the command prompt or PowerShell window showing the executed commands and the resulting outputs. Save the screenshot with the filename format: YourName_LabB_Part1_Task4.extension (e.g., JohnDoe_LabB_Part1_Task4.png). Tracing Network Routes Enter the command: tracert google.com What this does: This command traces the network route taken by packets from your computer to the specified destination (google.com). Enter the command: echo “ ” Capture Screenshot: Take a screenshot of the command prompt or PowerShell window showing the executed commands and the resulting outputs. Save the screenshot with the filename format: YourName_LabB_Part1_Task5.extension (e.g., JohnDoe_LabB_Part1_Task5.png). DNS Lookup Enter the command: nslookup www.google.com What this does: This command performs a DNS lookup for the specified hostname (www.google.com) and displays its associated IP address(es). Enter the command: echo “ ” Capture Screenshot: Take a screenshot of the command prompt or PowerShell window showing the executed commands and the resulting outputs. Save the screenshot with the filename format: YourName_LabB_Part1_Task6.extension (e.g., JohnDoe_LabB_Part1_Task6.png). Part 2 - Linux Command Line Tools System Information Open the terminal on your Ubuntu Linux machine. Enter the command: uname -a What this does: This command displays detailed information about the Linux kernel version, architecture, and other system details. Enter the command: echo “ ” Capture Screenshot: Take a screenshot of the terminal window showing the executed commands and the resulting outputs. Save the screenshot with the filename format: YourName_LabB_Part2_Task1.extension (e.g., JohnDoe_LabB_Part2_Task1.png). CPU Information Enter the command: lscpu What this does: This command displays detailed information about the CPU architecture and configuration of your Linux system. Enter the command: echo “ ” Capture Screenshot: Take a screenshot of the terminal window showing the executed commands and the resulting outputs. Save the screenshot with the filename format: YourName_LabB_Part2_Task2.extension (e.g., JohnDoe_LabB_Part2_Task2.png). Disk Space Enter the command: df -h What this does: This command displays the disk usage and available free space on all mounted filesystems in a human-readable format. Enter the command: echo “ ” Capture Screenshot: Take a screenshot of the terminal window showing the executed commands and the resulting outputs. Save the screenshot with the filename format: YourName_LabB_Part2_Task3.extension (e.g., JohnDoe_LabB_Part2_Task3.png). Network Information Enter the command: ifconfig What this does: This command displays the IP configuration for all network interfaces on your Linux system. Enter the command: echo “ ” Capture Screenshot: Take a screenshot of the terminal window showing the executed commands and the resulting outputs. Save the screenshot with the filename format: YourName_LabB_Part2_Task4.extension (e.g., JohnDoe_LabB_Part2_Task4.png). Network Connectivity Enter the command: ping google.com What this does: This command sends ICMP Echo Request packets to the specified destination (google.com) to test network connectivity. You will notice that it keeps pinging, more than four times like it did on the Windows system. Hit Ctrl+C to stop the ping. Enter the command: echo “ ” Capture Screenshot: Take a screenshot of the terminal window showing the executed commands and the resulting outputs. Save the screenshot with the filename format: YourName_LabB_Part2_Task5.extension (e.g., JohnDoe_LabB_Part2_Task5.png). Tracing Network Routes Enter the command: traceroute google.com What this does: This command traces the network route taken by packets from your Linux machine to the specified destination (google.com). Enter the command: echo “ ” Capture Screenshot: Take a screenshot of the terminal window showing the executed commands and the resulting outputs. Save the screenshot with the filename format: YourName_LabB_Part2_Task6.extension (e.g., JohnDoe_LabB_Part2_Task6.png). DNS Lookup Enter the command: nslookup www.google.com What this does: This command performs a DNS lookup for the specified hostname (www.google.com) and displays its associated IP address(es). Enter the command: echo “ ” Capture Screenshot: Take a screenshot of the terminal window showing the executed commands and the resulting outputs. Save the screenshot with the filename format: YourName_LabB_Part2_Task7.extension (e.g., JohnDoe_LabB_Part2_Task7.png). Part 3 - Build and Submit Lab Report Create a lab report in your word processing application (Word, Google Docs, etc.). Your lab should be organized as follows: Title page or page heading with your name, course number, assignment name, professor's name, and date. Create a section heading for Part 1 and Part 2. Insert your screenshots from parts 1 and 2 under the corresponding section header. You must put them in sequential order and you must label them above each screenshot. Labeling them means it should look like this: Title Page New Page Part 1 Task 1 Task 2 and so on… Part 2 Task 1 Task 2 and so on… Verify that you have inserted all screenshots and have the report formatted correctly. Submit the completed Word document to this area before the deadline. You may also save/convert it as a PDF before submitting it. This must be submitted as an attachment, not a link. Lab Complete!

Description 8) What is the future of securing software applications in a world where AI is capable of developing applications in a matter of seconds? Defend your position on whether or not companies should still develop Applications following the traditional method( programming languages or should they adopt AI? What are the risks and the advantages of both? 6) Recently we have had a lot of issues with updates and patches to our current Autonomous Vehicle Software hub.  Two things I need you to consider: 1. Update software only when necessary for functional requirements, to provide a stable platform for users. 2.  Describe potential user inputs to our vehicle and support web page?  How do you suggest we protect these systems from invalid input? 4) What are the requirements for system security plan? why are security considerations being important in the planning of system behavior? Please use any viable resources to justify your position. 10) List and explain three ways to become proactive in secure software development. Justify with examples.

Description Project Part 3: SQL Injection Response Scenario Aim Higher College just learned that sensitive information has been stolen from a student information system and posted on the Web. After reviewing web server and database logs, the Aim Higher IT security team believes that the source of the problem is a SQL injection vulnerability. The vulnerability appears to exist in a web application used by students to register for courses. As part of the incident response report to be submitted to Aim Higher College’s management staff, your supervisor asks you to provide details about this type of vulnerability, how an attacker might exploit it, and methods of detection and removal. Required Resources ?Access to the Internet ?Course textbook Tasks Research SQL injection attacks on the Internet to supplement your existing knowledge. Using the information you discovered during this research, in conjunction with what you learned in class, write an incident response report for Aim Higher College’s management detailing the following information: ?A non-technical description of SQL injection vulnerabilities intended for a college management audience. ?The threat that SQL injection poses to the college’s data. Include three possible scenarios that describe how an attacker might conduct this type of attack, the information that they may be able to obtain, and how they might use it maliciously. ?An implementation plan to fortify the college’s web applications against SQL injection attacks ?A monitoring plan that will provide: ?Early warning to developers and security administrators that a SQL injection vulnerability exists in a web application ?Detection of successful and unsuccessful attempts to conduct SQL injection attacks against college systems Lab #9) When you are notified that a user’s work station or system is acting strangely and log files indicate system compromise, what is the first thing you should do to the workstation or system and why? When an anti virus program identifies a virus and quarantines this file, has the malware been eradicated? What is the SANS Institute’s six-step incident handling process? What is the risk of starting to contain an incident prior to completing the identification process? Why is it a good idea to have a security policy that defines the incident response process in your organization? The post-mortem, lessons learned step is the last in the incident response process. Why is this the most important step in the process?

Description 52 million dollars in lost revenues and counting, a cyber-attack on MGM Resorts International, a 14B Las Vegas gaming empire with Hollywood-famous hotel spreads like the Bellagio, Cosmopolitan, Excalibur, Luxor, and the MGM Grand itself, had the house brought down by a perfect example of vishing…a 10-minute phone call. Gamblers could not gamble. Guests could not access rooms. Lights went out. The attack led to hours of delays in guest check-ins and affected electronic payments, key cards, thousands of slot machines, ATMs, parking, and other systems. A malware research group called VX-Underground claimed that the RaaS group "ALPHV" (a.k.a. BlackCat, a ransomware-as-a-service) was responsible for the attack. An earlier Reuters story on 9/13 initially reported "Scattered Spider" (a group of kids operating in the U.S. and UK), as the perpetrator. What happened? Social engineering happened. Research what exactly happened. Then discuss how you would have prevented this attack. Do NOT give your opinion as to whether MGM should or should not have paid (their competitor, Caesar's Resorts, was the victim of a recent ransom attack - and they paid an estimated $15 million dollars). After finding out what happened, just give your opinion (make recommendations) as to how MGM could have prevented it. If you even discuss whether you would pay or not pay, you will receive a ZERO in the Planning scoring category of the rubric for not following instructions. Remember that you must make one original post and one reply post and you MUST provide a source in your original post. You MUST follow the course Discussion Instructions. Reply to the next message. The cyber-attack on MGM Resorts was initiated through a sophisticated social engineering tactic, specifically a vishing attack, which then led to a broader and more destructive ransomware attack carried out by the Scattered Spider group, eventually involving the BlackCat/ALPHV ransomware group. The attackers initially gained access by convincing an MGM employee to divulge login credentials over a phone call. This initial breach allowed them to escalate their access privileges within MGM's network, particularly targeting and compromising the Okta and VMware ESXi servers. They deployed ransomware across MGM's virtual machine infrastructure, causing widespread operational disruptions. 

Description QUESTION(S):  In response to your peers, identify some of the strategies or tools that could be used to help remediate the issues your peers identified in their initial posts. PEER POST # 1  Some of the biggest issues a company will face when it comes to data protection are related to how the data is maintained. For example, a company could have inside threats that could misuses or mishandle the information.  "Poor data stewardship practices are either already bad actors or could become bad actors in the right situation" (Alan E. Earls, 2021).  Other concerns relate to privacy and regulation. For example, if a US company does business in the UK and they are processing UK customer data, they would need to comply with GDPR in the UK and with CCPA in the US (Alan E. Earls, 2021). Not only customer data can be exposed, but also the companies sensitive information such as records and employee personal information. This is why it's important for companies to protect their data as leaks and mishandling could cause irreparable damage to the company, its employees, and the consumers. PEER POST # 2 When companies choose to not practice proper data protection or just have lack of preventive step to prevent data protection the company can be variable to data breaches and privacy incidents that can tarnish a company's reputation and have customer trust issue. Leaving itself to various risks making the company rely on incident response teams. With that in mind what if the company is just starting out and don't fully understand what proper data protection is need for their company, or maybe they have groups of employees that don't know what procedures to follow due to lack of training that provide for employees I know I work a few jobs where I was never really given a single paper about any protective steps need to protect customer data and these were billion dollar companies. But fixing poor data practices with a company will require the company to take a comprehensive or even a systematic approach to help itself and its employees change as an organization.

Description Please create a PowerPoint presentation (15-20 slides) on the topic given below: Topic:  Refer to the website: https://www.southwesternrailway.com/ Select any CASE statement. You can summarize the case, talk about initial issues, how they overcame those issues, COVID19’s impact on them, both negative and positive, how they used design thinking, etc. From a design thinking point of view discuss your initial reaction to the site, is it intuitive, easy to follow? Do you have any recommendations for improvement?

Description Prepare ten PowerPoint slides that elaborate on Security Development Lifecycle.

Description Prompt: Describe one situation where it is most appropriate to use symmetric encryption and one situation where it is most appropriate to use asymmetric encryption. Justify your choices.

Description Segment 6 - Knowledge metadata, ontologies No unread replies.No replies. Read textbook Ch. 8 and the recommended readings to: 1. Define metadata, ontologies and discuss at least one KM tool. 2. Examine the relevance of metadata for organizational strategic planning and  Knowledge Management process. 

Description Instructions: There are 2 discussion questions. Read each discussion question and answer thoroughly in 250 words or more each. Discussion Question 1: See if you can find online financial information to add to the discussion. From the reading how did Red Robin develop an IT strategy? The textbook dedicated a lot of pages to Red Robin as an example. What were your key takeaways from that reading? Tip: Chapter on Facilitating Corporate and Divisional Strategy in Implementing World Class IT Strategy. Resource:https://bookshelf.vitalsource.com/reader/books/9781118634080/pageid/0 or High, P. (2020). Implementing world class IT Strategy: How IT can drive organizational Innovation (1st ed.). Jossey-Bass. ISBN: 9781118634110, 111863411X (Print Version), 9781118634080, 111863408X (eText) Discussion Question 2: View the video in the reading on SWOT and TOWS analysis. Why did internal and external come into play when creating a TOWS analysis? Did the video or article make more sense in terms of explaining the strategic value in a TOWS analysis? Video: Strategic Planning: SWOT & TOWS Analysis - YouTube Article: TOWS Analysis: A Comprehensive Guide (visual-paradigm.com) Resource: https://bookshelf.vitalsource.com/reader/books/9781118634080/pageid/0 or High, P. (2020). Implementing world class IT Strategy: How IT can drive organizational Innovation (1st ed.). Jossey-Bass. ISBN: 9781118634110, 111863411X (Print Version), 9781118634080, 111863408X (eText)