Your answers should be written in essay form with a clear Introduction, Body, and Conclusion (these are not section headings, they are the components of an essay). There is no minimum length, but you should clearly answer the question, and the essay format implies at least three (3) paragraphs or more. Your answers should be in your own words. Use examples as applicable. Short quotes can be used as needed. Cite any references used, in APA format, listing the applicable references immediately following each essay, not listing all of them at the end of the paper. Do not repeat the question in your paper, simply indicate the question number (e.g., EQ1, EQ2, and EQ3).The Midterm Exam consists of the following three (3) Essay Questions:EQ1. In 1987, Denning wrote that the development of a real-time intrusion-detection system is motivated by four factors:Most existing systems have security flaws that render them susceptible to intrusions, penetrations, and other forms of abuse; finding and fixing all these deficiencies is not feasible for technical and economic reasons.Existing systems with known flaws are not easily replaced by systems that are more secure-mainly because the systems have attractive features that are missing in the more- secure systems, or else they cannot be replaced for economic reasons.Developing systems that are absolutely secure is extremely difficult, if not generally impossible.Even the most secure systems are vulnerable to abuses by insiders who misuse their privileges.Are these factors still relevant today?Are there any new factors that motivate the development of real-time intrusion-detection systems? Justify your answer. [70 points]EQ2. In your own words, explain the concept of Network Security Monitoring (NSM). Provide five (5) recommendations, stated in the text for proper management of NSM devices (servers and sensors), to keep the NSM data secure and protect those systems from attacks. [60 points] EQ3. In your own words, explain the linkages between the use of Network Security Monitoring tools and Incident Response functions. Include at least five (5) benefits that may be achieved during Incident Response from the use of NSM analytical data. [70 points] Essay Exam Formatting Requirements:APA Standard 1-inch margins all aroundStandard font (e.g., Arial, Times Roman, Calibri, Tahoma, etc.)12-pt font sizeDouble-spacedNo cover page - use a simple heading at the top of the first page with Course #/Title, Exam Name, Your Name, and Date (this heading can be left-justified, centered or right-justified)No AbstractIdentify the question number for each response (e.g., "EQ1") - do not repeat the actual question textWhen using external sources, list the references immediately following the end of the essay question where used (do not put all references at the end of the document)Start EQ2 and EQ3 at the top of a new pageNOTE: Essay papers will be submitted to SafeAssign to check for plagiarism.

Threat Modeling A new medium-sized health care facility just opened and you are hired as the CIO. The CEO is somewhat technical and has tasked you with creating a threat model. The CEO needs to decide from 3 selected models but needs your recommendation. Review this week’s readings, conduct your own research, then choose a model to recommend with proper justifications. Items to include (at a minimum) are: User authentication and credentials with third-party applications 3 common security risks with ratings: low, medium or high Justification of your threat model (why it was chosen over the other two: compare and contrast) You will research several threat models as it applies to the health care industry, summarize three models and choose one as a recommendation to the CEO in a summary with a model using UML Diagrams (Do not copy and paste images from the Internet). In your research paper, be sure to discuss the security risks and assign a label of low, medium or high risks and the CEO will make the determination to accept the risks or mitigate them.