Analyze Hot Spots

By Author: Shirley Green
Total Articles: 129
Comment this article

You know that a lot of work has to be done to bring MCTS: Windows Vista operations up to Tailspin Toys standards. But you must make an immediate report to your boss on the situation to detail the critical nature of the problem and areas that must be changed immediately. Answer the following question.
1. What are five immediate areas of concern? Explain why these are concerns.
IT auditor from the auditing firm Fabrikam "Thank you for hiring my company to do this review. Coho Winery has no IT auditing in place. None. We
would be happy to design an auditing policy for Coho Winery. Here are the
results of my audit."
Backup operator "Yes. I make all the data backups every night. Then I put the tapes in the trunk of my car. At the end of the week, I take them to my house. I got a spare room. Where do I live? Oh, just down the road. I could get those tapes in a minute if we need them."
Help desk "What problems? I can solve all the problems. People call me with their problems. I solve free exam papers. Excuse ...
... me, my phone is ringing. I don't get paid to talk. Probably Sally can't get to another file she needs. She is always deleting things then wanting them back, or can't get to something because she doesn't have access."
Access control provides additional layers of defense. Permissions, audit, backup,and EFS can all work together to manage access to resources.
Delegation of authority is used to reduce administrative workload and to provide separation of duties and autonomy for divisions and departments within the company.
Backup plans for data are essential. They should include provisions for protecting the backup data, media, and operations.
Encryption and decryption of files should be managed carefully. Encryption has little effect if it is easy to discover the user's password or to become the file recovery agent. When a sound protection and recovery mechanism is provided, EFS can provide exquisite Microsoft exam control over access to sensitive information.