Alabama Life and Casualty Insurance Corporation specializes in underwriting comm

Question

Alabama Life and Casualty Insurance Corporation specializes in underwriting commercial farm policies throughout the southern United States. The company’s chief information officer has become increasingly concerned that one of the company’s recent hires, a tech-savvy actuary, is directly accessing several production SQL Server databases using unapproved tools and access methods. Before approaching the employee’s supervisor, he has asked you, as the database administrator, to gather some additional information on the client application, network protocol, and queries that he believes the actuary is using on a routine basis. Your SQL Server 2012 instance is configured for Windows Authentication only and you manage role security using Active Directory. The database server is only accessible from within the local area network (LAN), and no firewalls are present between the server and client applications.

Describe the potential pitfalls you envision in trying to execute this plan.

Explain which data elements you think will be most challenging to capture, and why.

Explanation / Answer

ANSWER:

• Directly access contains safety issue because of no firewalls are present between customer and server. • Using unapproved tools and method means cause system difficulty and accuracy problem in data.
• Database firewall used to prevent the file specific attack from unofficial resources.
• There is many safety threats facing for this difficulty like loss of accessibility, integrity and confidentiality
Challenging data elements:
• Database contains some standard use of structure, access structure using text, or macros is difficult to achieve.
• Identification of deal surf to data entry for prearranged database is hard to achieve.
• Identification of flow manage and addition in the database.

Related Questions

Navigate

• Browse (All)
• Browse A
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.