network engineering

In many organizations the boundary between the network administration group and the security administration group is not well delineated which leads to conflict and lack of clarity in responsibilities. Give a brief example of a situation that others might have experienced. What would make it easier for an organization to prevent such conflicts from occurring? What do you think are the most important security policies that an organization needs to have in place and why? A lot has been said regarding physical security in the recent past. What are your thoughts on biometrics and how can they be used more effectively in the overall physical security effort? Is airport screening effective? How can it be improved? Give an example of a system (or type of system) that you would recommend protecting with host-based IDS. Provide a topic describing the system and briefly explaining why HIDS would be appropriate to use as security measure. What role do you think IDS (network and/or host-based) should have in the security posture of a home network? Can a user with the following clearance {Top Secret; (Red, Blue)} have access to information classified in the following ways under the military security model? a.{Top Secret; Blue} b.{Secret; Green} c.{Secret;(Red, Yellow)} d.{Confidential; (Red, Blue)} In the early days of Kerberos the authentication protocol was vulnerable to replay attacks. How can a security administrator reduce the possibility of a replay attack in Kerberos? Before the advent of Active Directory, Microsoft utilized LANMAN authentication. What are some of the critical flaws in the LANMAN authentication? Name three advantages of syslog over the Microsoft Windows event logging system? This requires some thought about what types of IDS you might use, and in what locations, to protect a home network environment. Create a network "architecture" diagram representing a regular home network (presuming Internet access is available from home) and to indicate on the diagram where you might locate IDS sensors. You need not use a technical drawing tool such as Visio, nor do you need to find relevant clip art or other graphics for your diagram. Lines and boxes such as those you can produce in PowerPoint are sufficient. If drawing via computer is not feasible, a scanned image of a hand-drawn diagram is acceptable as well. Diagram should include the following elements at a minimum: [login to view URL] of your Internet connection (whether dial-up, cable modem, router, etc.) [login to view URL] connected to the network, as well as a designation of whether the connection type is wired or wireless (or both) [login to view URL] other devices attached to the network [login to view URL] location and type of any IDS sensors you would place on the network A brief text description of the diagram should also be included, particularly to explain your choices about IDS placemen.