The purpose of this discussion is to evaluate a sample security assessment report. As a starting point, we will consider a sample report prepared by the Xervant Cyber SecurityLinks to an external site. company.
ade publicly available to indicate the kinds of security assessments Xervant Cyber Security can perform. This is a short report and will not take long to read and understand. The ACME Corporation that the sample report was prepared for is (most likely) a fictional organization, but the types of vulnerabilities found can certainly exist in many real organizations today.
Initial Post
Once you have read the sample report document, note that the authors list network vulnerabilities and remediation recommendations. Security penetration testers will typically perform a number of types of simulated attacks to evaluate the security state of an organization including:External Network Penetration Testing
Wireless Network Penetration Testing
Physical Site Penetration Testing
Internal Network Penetration Testing
Application Penetration Testing
Social Engineering Testing
Based on the report, can you guess which of these tests were performed to generate the sample report? If you are unfamiliar with the idea of penetration testing, NIST SP 800-115 Download NIST SP 800-115can provide enough of a background.
PROMPT
Briefly comment on the types of tests the people who generated the report may have performed and which ones they definitely did not perform. Justify your answer.
Briefly comment on the relevance of the tests that were performed to the threats that you would consider to be the most serious at this time.
Based on the data in the report, would you agree that threats like ransomware were not assessed? If so, list three (3) tests that could have assessed ACME’s susceptibility to ransomware attacks. If you do not agree, list three (3) reasons to justify your answer.
NOTE Your original post should be professionally organized. Ensure that you put the prompt headers before your response. These headers will not count toward the word limit. Break up your post into separate paragraphs that each communicate a single idea. Do not submit your response as one giant paragraph.
Reply Post
Respond to at least two original posts from your peers. Your reply should be substantial and thoughtful. Below are things that constitute a substantial and thoughtful reply:
Questioning: You contribute to a meaningful conversation by asking thoughtful questions that move the discussion forward and deeper into understanding the topic as a whole and connecting it to the course material or the professional setting.
Challenging: You constructively challenge the explanation provided by your peer by providing a different point of view and providing detailed justification to support this view.
Reflecting: You indicate how a peer’s post has changed your perspective on the topic. Articulate your original perspective and then outline how your perspective has changed by referencing specific elements of your peer’s post.
NOTE You will need to compose and post your discussion response before seeing what other students have posted. This is meant to encourage original thinking and allow you to objectively compare your thoughts with others.
Evaluation
Be sure to cite any references used to support your discussion posts.
Your answer will be evaluated using the criteria in the attached rubric. To view this rubric, click on the three dots in the upper right-hand side of the screen and select Show Rubric.
All required documents have been dropped here.
This criterion is linked to a Learning OutcomeQuality of initial post
8 ptsCompletely Meets Expectations
Completely and thoughtfully addresses the discussion prompt(s); provides excellent support of main points by incorporating course material, personal examples/experiences, external references, or by making connections with concepts from other lessons, units, or courses
4 ptsPartially Meets Expectations
Completely addresses discussion prompt(s); provides support of main points by incorporating some evidence from the course material, personal examples/experiences, external references, or by making connections with concepts from other lessons, units, or courses
0 ptsDoes Not Meet Expectations
Does not demonstrate thoughtful consideration of the prompt(s) by providing new resources or ideas, and/or does not support the main points with course materials, examples, or references
8 pts
This criterion is linked to a Learning OutcomeQuality of replies
8 ptsCompletely Meets Expectations
Makes two or more discussion posts or comments on peers’ posts; presents and/or evaluates multiple points of view or opinions from self and others while reflecting on how the viewpoints were developed; asks thoughtful questions to move the discussion forward or makes connections with course materials, personal examples/experiences, external references, or concepts from other lessons, units, or courses; contributes to a meaningful conversation by posting replies that may be spread out over multiple days with multiple classmates
4 ptsPartially Meets Expectations
Makes two or more discussion posts or comments on peers’ posts; presents and/or evaluates opinions from self and others; makes some connections with course materials, personal examples/experiences, external references, or concepts from other lessons, units, or courses
0 ptsDoes Not Meet Expectations
Doesn’t make at least two discussion posts or comments on peers’ posts; doesn’t evaluate the opinions of others; makes no connections with course materials, personal examples/experiences, external references, or concepts from other lessons, units, or courses; all posts are made on the last day, thus minimizing the ability of classmates to engage in a meaningful way
8 pts
This criterion is linked to a Learning OutcomeDemonstrates professionalism and proper netiquette in responses and comments
4 ptsCompletely Meets Expectations
Professional vocabulary and writing style always used while always respecting the opinions of others
adminX
Subject expert at Treatisely.