Disaster Recovery – Assignment
Programming
Complete the real world exercises at the end of the chapter. Write your answers in complete sentences and use APA formatting rules. Each answer should be a minimum of 1 paragraph (3 or more sentences)
End of chapter 7 Real world exercises (page 304)
1-3
End of chapter 8 Real world exercises (page 359)
8-1, 8-2 and 8-3
Chapter 7:
1. Using a Web browser, perform some research on a newer malware variant
that has been reported by a major malware containment vendor. Using a
search engine, go to the vendor’s Web site; this could be Symantec, McAfee,
or any of their competitors. Visit one malware prevention software vendor.
Search for the newest malware variants and pick one. Note its name and try
to understand how it works. Now look for information about that same malware from at
least one other vendor. Were you able to see this malware at both vendors? If so, are there
any differences in how they are reported between the two vendors?
2. Log management and log analysis are techniques used to collect and report on what’s
happening on a network. Visit the log management community’s Web site at www.
syslog.org. This site is devoted to log management tools and the techniques to use the
tools. Click the Compliance tab and read the material found there for more information
about what are considered best practices for log management.
3. Depending on copyright, the documentary “The KGB, the Computer and Me” may be
available for viewing on public video-streaming services. Use a search engine to search
for the title, and watch it if it is available. (The video remains available as of 2012. It
runs about 57 minutes.)
Chapter 8:
Exercise 8-1
Using a Web search engine, look up “Trojan Defense.” How can it be used to
question the conclusions drawn from a forensic investigation?
Exercise 8-2
At the end of 2006, a new edition of the Federal Rules of Civil Procedure (FRCP) went into
effect. Using a Web search tool, learn more about the FRCP. What likely effect will its
emphasis on electronically stored information (ESI) have on an organization’s need for a
digital forensic capability?
Exercise 8-3
Using a Web search tool, identify some common certifications for digital forensic practitioners
and determine whether the certifications are for practitioners at public sector organizations
or private sector organizations.
