ccna certification book amazon

ccna certification book amazon. Identify all elements that are contingency open (fail.open). A contingency open occurs when a failure causes a security function to be completely bypassed. Ideally, all security elements should be automatically fail-proof. If an element fails, it should default to a secure state, such as blocking all traffic. Make every effort to identify all possible attacks. One way to accomplish this is to use a top-down analysis of possible system failures, which involves evaluating the simplicity and likelihood of each type of attack on the system. This analysis is often referred to as attack tree analysis o Assesses the likelihood of exploitation. Focus on the resources needed to create an attack rather than a specific vulnerability. Ensure that advances in technology are considered.Make sure that advances in technology are considered. Assume that people can make mistakes. For example, an end user may use a system incorrectly and unconsciously compromise the security of the system. Attackers may not use common and proven techniques to compromise a system. Instead, they may use seemingly random attacks to compromise the systemsystem, looking for possible information about how the system will react in unintended situations. Check all assumptions with others. Others may have fresh insights into potential threats and their probability of occurrence. The more people who question a hypothesis, the greater the probability of finding a false hypothesis.10.1.2 Cheng Office Identification and Risk Analysis10.1.2.1 Threat IdentificationThreat identification provides the organization with a list of threats to the system in a given environment. When identifying threats, there are two very importantimportant questions to answer: What are the possible vulnerabilities in the system? What are the consequences if the system vulnerability is exploited? For example, the identification of threats to a connected electronic banking system would include the following.Internal system compromise (Internal system compromise) ------------- An attacker using an exposed e-banking server to compromise an internal banking system.