I. Linux System ScanAs part of your Vulnerability Management project last week, you analyzed a report on a Windows system within the company network vulnerable to the MS17-010 exploit. That report was created using OpenVAS, a free vulnerability scanner designed to run on Linux operating systems (openvas.org https://www.openvas.org/). Now that you’ve examined a vulnerability assessment report for a Windows machine, it’s time to see what the same tool produces from a Linux system. OpenVAS was used to scan a Linux machine on the network running the company’s database applications. This machine is using an older version of Linux because the company’s database applications are not supported with the latest Linux shared libraries. This system contains critical data and cannot be taken offline.Your analysis of these two reports should provide you with a good understanding of the OpenVAS tool and the reports you will encounter in the workplace. The report used for this discussion limits the scope to a single host to allow you to focus on the vulnerabilities you would encounter on a Linux machine in the workplace. You will also be able to compare/contrast the vulnerabilities across the two OS platforms.Looking ahead to Project 2’s VM Scanner Background Report (due at the end of Week 5), you will analyze the results from a commercial VM scanner. You’ll be better prepared to assess the output from the two different vulnerability scanning tools and to form the basis of your recommendation to management.Review "Report of Linux Server (Old)" – See attachment and answer the following questions in your response:1. For this Linux system, what do you recommend fixing right away? Are there dangers if the vulnerabilities and associated threats are not fixed?2. How do you fix the problem(s) identified? Can you defer mitigation for another time? How can the problem(s) be fixed if the system cannot be taken offline?Judy is considering asking the pen tester to rescan the company systems using the commercial tool, Nessus. The organization has an evaluation version that can be used for 30 days. After that, the company will need to purchase the tool. The cost is significant.3. Since some machines were already scanned with OpenVAS, should you also consider scanning the same systems with Nessus? Why or why not?4. Conduct open-source research using the internet. Roughly, what is the cost to license Nessus for one year?Be sure to include references, command output, screenshots, etc.II. The Cybersecurity Analyst's ToolboxDuring job interviews, employers often ask if you are familiar with cybersecurity software. For this reason, it is a good idea to become familiar with commonly used software, including capabilities and limitations. These software products are the tools for conducting your day-to-day duties.1. Describe the Metasploit software tool that you used that has helped you to better understand the role of an analyst within an organization2. Describe the process to install, set up, and configure the Metasploit tool. Did you find the tool easy to use? Did you encounter challenges?3. Highlight some of the benefits of the Metasploit tool. Provide some examples of where you think using the tool would benefit you as a cybersecurity threat analyst. Why do you think the tool would be best?Be sure to include references, command output, screenshots, etc.

You can also conduct a literature review on information governance and how it is applied to an Information Technology organization.You are to review the literature on Information Governance planning and discuss problems and gaps that have been identified in the literature. You will expand on the issue and how researchers have attempted to examine that issue by collecting data – you are NOT collecting data, just reporting on how researchers did their collection.As you read the literature, it will become apparent that there are multiple issues, pick one issue that stands out in the literature and agree on that as a Team to address that as your project topic.Please follow all these steps...Cover Page: Include the names of those who participated in the projectTable of contents:Use a Microsoft Enabled Table of Contents feature. Modify as required to ensure it is APA compliant.Background:Describe the issue, discuss the problem, and elaborate on any previous attempts to examine that issue.Research Questions:In your identified problem area that you are discussing, what were the research questions that were asked?Methodology:What approach did the researcher use, qualitative, quantitative, survey, case study? Describe the population that was chosen.Data Analysis:What were some of the findings, for example, if there were any hypotheses asked, were they supported?Conclusions:What was the conclusion of any data collections, e.g., were research questions answered, were hypotheses supported?Discussion:Here you can expand on the research and what the big picture means, how do the results found in the literature review help organizations in the Information Technology strategy planning. What do you see as long-term impacts and what further research could be done in the field?References:Include at least ten scholarly references in APA format.Make sure you cite your sources appropriately.