Rrespond to the following questions in a Microsoft® Word document. List the question in the paper and
follow the question with your answer.
If the Lab does not work, research each of these questions on the Internet to provide an answer.
1. Describe information found in logs and the value it might have in a security investigation.
2. Active Directory audit policy settings are critical to the overall audit capability of the network. Explain
why.
3. What are the risks associated with logging too little data or not auditing the correct events?
4. What are the risks associated with logging too many events?
5. What is the impact on security and security investigations of using default configurations settings to
create audit logs?
6. This was just a single domain with two systems on a local LAN. Describe the complication of auditing
and log management in a large Enterprise network with several domains and over 1000 computers in the
LAN/WAN?
7. Consider a cloud-hosted Infrastructure as a Service (IaaS) environment with many new, internetaccessible systems regularly being built and brought online. Describe the challenges with managing audit
policies and logs in such an environment?
8. Finally, conclude this week’s assignment with a page explaining how the tools and processes
demonstrated in the labs might be used by an infrastructure administrator to help secure an environment.
Organization and Formatting Cover Sheet and References required.
NOTE: If you do not use references in this assignment, note that with “References: None” in the paper.
Submit your assignment.
ATTENTION: DO NOT PLAGIARIZE. All papers are checked automatically for plagiarism and a report is
generated. If you copy work from any other source, whether it be Internet or another student paper, this
system is likely to detect it. Using sources in your work is encouraged, but put the answers in your own
words and properly cite any sources you use.
The answer to these questions must be in your own words. You cannot simply copy and paste an answer,
even if you properly cite it. If that is done, it will be treated as though the question were not answered at all.