CMIT 425

profileHansbke17
cmit425_week_2_essay_questions.docx

WEEK 2 ESSAY QUESTIONS

Instructions: Answer all questions in a single document. Then submit to the appropriate assignment folder. Each response to a single essay question should be about a half-page in length (about 150 words).

1. Not all information has the same importance and value to a company. How data is classified is an important factor used in determining the amounts of funding and resources that should be applied to protecting each type of data. Describe the data classification levels within commercial and military organizations and provide examples of the types of information that would be classified at each classification level.

2. It takes a team of individuals throughout the organization working together to safeguard the integrity and confidentiality of data resources. Describe the layers of responsibility within an organization when it comes to asset security and data protection. For each role, discuss their responsibility within the organization for asset security.

3. The architecture of a computer system is very important and comprises many topics. The system must ensure that memory is properly segregated and protected, ensure that only authorized subjects access objects, ensure that untrusted processes cannot perform activities that would put other processes at risk, control the flow of information, and define a domain of resources for each subject. It also must ensure that if the computer experiences any type of disruption, it will not result in an insecure state. Many of these issues are dealt with in the system’s security policy, and the security mode is built to support the requirements of this policy. Explain the concept of a trusted computing base and describe how it is used to enforce the system’s security policy. Provide examples of specific elements (hardware, software or firmware) in the architecture of the computer system could be used that provide security within the TCB.

Criteria

Outstanding 100 points

Very Good 90 points

Above Average 80 points

Average 70 points

Below Average 50 points

Poor 30 points

No Response 0 points

Question 1

Student answered the question fully and provided extensive details and explanations to support the answer.

Student answered the question fully and provided details and explanations to support the answer but missed some very minor points/topics.

Student answered the question fully and provided details and explanations to support the answer but missed several minor points/topics.

Student provided basic answer and/or provided some details and explanations to support the answer but missed major points/topics.

Student provided insufficient answer or provided insufficient details and explanations to support the answer.

Student provided incorrect answer and didn’t provide any supporting details and explanations.

Student did not respond to question.

Question 2

Student answered the question fully and provided extensive details and explanations to support the answer.

Student answered the question fully and provided details and explanations to support the answer but missed some very minor points/topics.

Student answered the question fully and provided details and explanations to support the answer but missed several minor points/topics.

Student provided basic answer and/or provided some details and explanations to support the answer but missed major points/topics.

Student provided insufficient answer or provided insufficient details and explanations to support the answer.

Student provided incorrect answer and didn’t provide any supporting details and explanations.

Student did not respond to question.

Question 3

Student answered the question fully and provided extensive details and explanations to support the answer.

Student answered the question fully and provided details and explanations to support the answer but missed some very minor points/topics.

Student answered the question fully and provided details and explanations to support the answer but missed several minor points/topics.

Student provided basic answer and/or provided some details and explanations to support the answer but missed major points/topics

Student provided insufficient answer or provided insufficient details and explanations to support the answer.

Student provided incorrect answer and didn’t provide any supporting details and explanations.

Student did not respond to question.

Overall Score

Level 7 20 or more

Level 6 17 or more

Level 5 14 or more

Level 4 11 or more

Level 3 8 or more

Level 2 5 or more

Level 1 0 or more