1. list and describe the six stages of a forensics examination. 2. explain what
ID: 3885156 • Letter: 1
Question
1. list and describe the six stages of a forensics examination.
2. explain what a stateful firewall is and does.
3. Identify at least three different tools or commands that can be used to determine the ports open on a computer. Explain what can be identified by these tools or commands and what can be done to protect against exploitation from these tools or commands.
4. Identify what you believe the top three wireless network issues are and in your own words, offer suggestions on how to remediate each of them.
Explanation / Answer
1) The major advantage of this investigation cycle is easy to use in real time investigation process and easy to remember because all steps are starts from letter ‘R’ as given below.
There are six stages of a forensics :
1) Requirement Analysis
2) Retrieval of Data
3) Reliability
4) Review of Evidence
5) Representation of Evidence
6) Repository of Data
These steps are concern with how the investigator can conduct the perfect investigation process to catch the Cyber criminals. The success of the investigation is depends on how the chain of evidence is used in court to prove the Cyber crime. So, the forensic investigation life cycle is defining both technological as well as legal aspect of forensic investigation.
2) Stateful Firewall : Stateful inspection, also known as dynamic packet filtering, is a firewall technology that monitors the state of active connections and uses this information to determine which network packets to allow through the firewall.
Stateful inspection has largely replaced an older technology, static packet filtering. In static packet filtering, only the headers of packets are checked -- which means that an attacker can sometimes get information through the firewall simply by indicating "reply" in the header. Stateful inspection, on the other hand, analyzes packets down to the application layer. By recording session information such as IP addresses and port numbers, a dynamic packet filter can implement a much tighter security posture than a static packet filter can.
Stateful inspection monitors communications packets over a period of time and examines both incoming and outgoing packets. Outgoing packets that request specific types of incoming packets are tracked and only those incoming packets constituting a proper response are allowed through the firewall.
In a firewall that uses stateful inspection, the network administrator can set the parameters to meet specific needs. In a typical network, ports are closed unless an incoming packet requests connection to a specific port and then only that port is opened. This practice prevents port scanning, a well-known hacking technique.
4) The most common Wi-Fi problems are
Internet speeds and Wi-Fi have both improved significantly over the last several years. Data speeds are faster across the board and wireless connections are more reliable than ever.
However, Wi-Fi isn't without issue. Hang out at a Starbucks long enough and you can experience it firsthand.
Once you've set up your home network, here are some very common issues you may run into with Wi-Fi and how to correct them.
Slow connection
Despite faster speeds reaching most homes around the globe, wireless (and often wired) networks can get bogged down. If your Internet connection is still working but the speeds are slower than normal, there is usually a logical explanation that can usually be fixed.
Cause: The most obvious problem with Wi-Fi speeds slowing down is being too far from the router. The further you are from the router, the more unreliable the connection and its throughput will become.
Fix: To fix this, just get a little closer. If the router is located in a different room, try going into the room where the router is located and see if that fixes the issue. If this is a consistent issue, try to position your router higher (up on a shelf), away from other devices, which can interfere with it, and in a central location in your home.
If that doesn't work, consider purchasing a second router and a set of powerline network adapters to extend your network.
Cause: Another cause for slowdowns is a lack of bandwidth. If everyone is home and using their computers, phones and televisions for data-hungry applications, your typically speedy Internet is being spread thin and shared across multiple devices.
Fix: Disconnect any devices that you aren't actively using. If multiple people are trying to stream videos from, say, YouTube and Netflix, while someone else is trying to game online, you can try connecting one or more of the devices directly to the router using a Cat-5 ethernet cable to free up some of the wireless bandwidth. But the problem may be that you just don't have fast enough Internet speeds to support everything at once.
There is also the possibility that someone nearby is leeching off your Internet. To prevent this from happening, be sure to setup security for your network and give out the password sparingly.
Related Questions
Navigate
Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.