cisco certification in networking

cisco certification in networking.168 Chapter 3 Security Principles permissions. The same concept of the principle of least privilege applies to software development. For example, a program or process running on a system should have the functionality needed to "get the job done" and should not have root access to the system. For a system where all programs run with root access, one vulnerability can be exploited and the damage can spread to the entire system. This means that users, applications, and processes should always be restricted to the minimum access they need.Hint: The "needtoknow" principle is somewhat similar to the least privilege principle in that users should only have access to the data and systems they need to do their jobs and nothing else.3.7.2 Segregation of DutiesSegregation of duties is an administrative control that states that all important or high authority duties should not be performed by a single person. In addition, all critical duties of the unit must be segregated and performed by different people, with the goal of preventing a single person from performing extremely critical or high authority operations that could jeopardize the system or compromise the unit's interests. For example, the security auditor responsible for checking the security logs need not have the privileges of a system administrator, and the network administrator should not have the privilege to change the system logs. This is to prevent such persons from deleting the logs that record their actions after performing an unapproved operation (in other words, to prevent such persons from covering their tracks).Suppose there is a safe that requires two keys to open at the same time, and those two keys are in the hands of two different people. Separation of duties is conceptually similar in that a user with only one key cannot open the safe.3.8 Security Operations CenterThe Security Operations Center (SOC) is the department that monitors, evaluates, and protects unit assets (e.g., applications, databases, services (11 servers, networks, desktops, and other endpoint hosts). Setting up an SOC requires careful planning. The planning phase 'To formalize the goals for setting up the SOC, develop a progress plan that can be used to track the projected goals. The success of any security project (including the establishment of an SOC) will be determinedincluding setting up an SOC) depends on proper planning. Each unit faces a variety of challenges related to governance, collaboration, incomplete tools, ineffective automation, lack of threat intelligence and skill sets, etc. It is important to identify and address or at least acknowledge the existence of these challenges early in the SOC establishment process. Setting up an SOC can address the following issues. How to detect intrusions in a timely manner? How to do an identification classification of the intrusion to determine its severity and ripple effect? Judging how the intrusion affects the business? Who is responsible for detecting and mitigating attacks? Who should be notified when an intrusion is detected, and who should handle the intrusion at what time?3.8 Security Operations Center 169