Week 8

• 8.1 What is the difference between RFC 5321 and RFC 5322?
• 8.2 What are the SMTP and MIME standards?
• 8.3 What is the difference between a MIME content type and a MIME transfer encoding?
• 8.4 Briefly explain base64 encoding.
• 8.5 Why is base64 conversion useful for an e-mail application?
• 8.6 What is S/MIME?
• 8.7 What are the four principal services provided by S/MIME?
• 8.8 What is the utility of a detached signature?
• 8.9 What is DKIM?

Week 9

• 9.1 Give examples of applications of IPsec.
• 9.2 What services are provided by IPsec?
• 9.3 What parameters identify an SA and what parameters characterize the nature of a particular SA?
• 9.4 What is the difference between transport mode and tunnel mode?
• 9.5 What is a replay attack?
• 9.6 Why does ESP include a padding field?
• 9.7 What are the basic approaches to bundling SAs?
• 9.8 What are the roles of the Oakley key determination protocol and ISAKMP in IPsec?

Week 10

• 10.1 What are three broad mechanisms that malware can use to propagate?
• 10.2 What are four broad categories of payloads that malware may carry?
• 10.3 What are typical phases of operation of a virus or worm?
• 10.4 What mechanisms can a virus use to conceal itself?
• 10.5 What is the difference between machine-executable and macro viruses?
• 10.6 What means can a worm use to access remote systems to propagate?
• 10.7 What is a “drive-by-download” and how does it differ from a worm?
• 10.8 What is a “logic bomb”?
• 10.9 Differentiate among the following: a backdoor, a bot, a keylogger, spyware, and a rootkit? Can they all be present in the same malware?
• 10.10 List some of the different levels in a system that a rootkit may use.
• 10.11 Describe some malware countermeasure elements.
• 10.12 List three places malware mitigation mechanisms may be located.
• 10.13 Briefly describe the four generations of antivirus software.
• 10.14 How does behavior-blocking software work?
• 10.15 What is a distributed denial-of-service system?

Discuss, in 500 words, how you would advise your current employer to use encryption to reduce the vulnerabilities of  their data at rest, in use, and in transit (or in motion).  Identify at what points you think their data is at the highest risk. Consider where the data is when it at rest, in transit, or in use and the potential vulnerabilities associated with each of those locations.

Use at least three sources. Include at least 3 quotes from your sources enclosed in quotation marks and cited in-line by reference to your reference list. Cite your sources. Do not copy. Write in essay format not in bulleted, numbered or other list format. 

Provide a URL for your citations.  Write in essay format not in bulleted, numbered or other list format. Do not copy without providing proper attribution. Use quotes to indicate where you have used other’s words. Your SafeAssign score is irrelevant if you have properly cited your work. However, it also shows when you have quoted work incorrectly so make sure your quotes use the original author’s language. 

Use the five paragraph format. Each paragraph must have at least five sentences. Include 3 quotes cited in-line and in a list of references. Include an interesting meaningful title.

It is important that you use your own words, that you cite your sources, that you comply with the instructions regarding length of your paper. Do not use spinbot or other word replacement software. It usually results in nonsense and is not a good way to learn anything. Please do not use attachments unless requested.

 For this assignment, you will write a 3-page intermediate strategic IS  plan for Reynolds Tool & Die. Outline an IT strategy to support the  upcoming merger and acquisition planned by the company. Your plan must  address timelines, systems integration, and change management. 

CSCI 415 Ethics, Law and Cybersecurity

Chapter 3 Quiz

NAME: _______________________________DATE: _________________

Chapter 3 – Quiz 3

Instructions:  There are two (2) topic areas listed below that are designed to measure your knowledge level specific to learning outcome (LO 3) shown in your course syllabus.  Please provide appropriate responses in essay form for both.  In most cases the topic area has several components. Each must be addressed to properly satisfy requirements.

State-wide and in most professional industries, there has been a mandate that college students be more proficient in their writing. While this is not a writing class, all writing assignments will be graded for grammar, syntax and typographical correctness to help address this mandate.

Pay attention to what you are being asked to do (see Grading Rubric below). For example, to describe does not mean to list, but to tell about or illustrate in more than two or three sentences, providing appropriate arguments for your responses using theories discussed in our text.  Be sure to address all parts of the topic question as most have multiple parts. A verifiable current event (less than 4 years old) relevant to at least one of the topics you respond to is a fundamental component of your quiz as well.  You cannot use information from the text book or any book/article by the author of the text book as a current event.  Make sure that your reference has a date of publication.  For each chapter quiz and final quiz you are required to find and include at least one reference and reference citation to a current event less than 4 years old (a reference with no date (n.d.) is not acceptable) in answer to at least one question.  This requires a reference citation in the text of your answer and a reference at the end of the question to which the reference applies.  You must include some information obtained from the reference in your answer.  The references must be found on the internet and you must include a URL in your reference so that the reference can be verified. 

You should type your responses directly under the appropriate question. Be sure to include your name on your quiz. Only the first two (2) questions with answers will be graded.   Include your name in the document filename. Your completed quiz must be uploaded into the appropriate eCollege Dropbox, no later than 11:59pm on the due date.  Do well.

1. Based on what you have learned in this chapter and using appropriate components, properly construct an argument to: (1) support or refute the view that all undergraduate students should be required to take a course in cyberethics; and (2) apply the seven steps (in Section 3.8) to your argument.  Please elaborate (beyond a yes or no answer) and provide your rationale in support of your responses (comprehension)
2. Using appropriate components construct an argument for or against the view that privacy protection should be improved in e-commerce transactions.  Next evaluate your arguments against the rules for valid, inductive, and fallacious arguments.  Does your argument contain any of the common or “informal” fallacies discussed in Section 3.9?  If so, elaborate. Please elaborate (beyond a yes or no answer) and provide your rationale in support of your responses (knowledge)

Grading Rubric for Quizzes

Grading criterion                                                                                          Unit Points           Total Points

Uploaded to correct Dropbox                                                                            2                            2

Submitted on time                                                                                            15                          15

Document Filename:

Your Last Name,first and middle initial with correct quiz number                   5                            5

(Example only: Creider_RD_q1)

Rationally expressed opinions, experiences (personal or observed),                  8

arguments and premises (where appropriate) to support responses

(did not simply restate/summarize author/textbook

Clearly presented classical ethics theories relative to topic                                8

Included ‘URL’ for appropriate verifiable current event                                 12                          28

(i.e., example of topic being discussed WITH EXPLANATION)

 NOTE: Must be less than 4 years old

Grammatically correct and appropriate tone                                10

(professional, non offensive language)

Typographically correct                                                               10                     20

Included full citations as needed                                                    3

Used correct APA format                                                               7                     10

Addressed each item within selected topic area                           20                     20

Maximum grade                                                                         100                   100

NOTE: POINTS WILL BE DEDUCTED FROM TOTAL ASSIGNMENT GRADE IF EACH QUESTION YOU SELECTED IS NOT INCLUDED IMMEDIATELY BEFORE EACH ANSWER.