- Risk - [10 points] Provide a one paragraph description of SOX (Sarbanes-Oxley Act). List three provisions (sections) within SOX and provide a detailed description of each and how each provision addresses fraud and other auditing challenges. - [10 points] The Tartan is a local ISP operating in the mid-Atlantic region of the United States. They support local customer's access to the Internet as a bottomtier ISP. They have become concerned about attempts to attack their authentication of their customers. Describe two authentication techniques that Tartan can implement to improve their cybersecurity posture and avoid unauthorized access. Each technique should have a one paragraph description. - [5 points] List the three distinct factors used for authentication and provide an example of each. - [5 points] Define multi-factor authentication and provide two examples of a multi-factor authentication solution. - [10 points] Describe how a firewall operates and define the distinction between a stateful and stateless firewall. - [5 points] Compare and contrast volatile and non-volatile memory. Give examples of each. - [5 points] What are the four phases of digital forensics