1. Write a brief description of a vulnerability found in the scan, including the operating system on which it was found, its risk factor, and its CVSS scores.
2. Are the results of default scans different than the credentialed scan?
3. Why might that be?
4. What types of vulnerabilities might an attacker without any credentials be able to identify and exploit?
5. This was a simple three computer LAN. How much more complicated would this process be for 100 computers? What about an enterprise with 10,000 computers on their LAN/WAN?
6. Consider a cloud-hosted Infrastructure as a Service (IaaS) environment with many new, internet-accessible systems regularly being built and brought online. What advantages or challenges might there be with regard to vulnerability management in the cloud?

No Hand drawings, please.

Consider the following scenario and then answer the corresponding questions.

ABC Travel and Tourism specializes in providing tourist packages to customers across the globe and the company has decided to develop an in-house software system that will help customers search for travel destinations based on popularity, budget, visa restrictions, government policies and attractive climatic conditions. Customers will also be able to book their air tickets, hotel and transportation (rental car, public transportation, cab services) through this system. Prior to the booking, the system will allow users to check for their visa eligibility to travel to destinations outside of their country of citizenship. Users will also be able to review and rate destinations or hotels using the system. The company also offers pre-set packages and if a customer decides to go with a specific package, they will be asked to provide the dates for their travel. The system will find an airline reservation, hotel/ transportation choices and create an itinerary for the customer. Customers will not be allowed to customize the pre-set packages.

Once the booking is done, the system should send a notification to the users on the purchase confirmation within 2 hours. Cancellations will incur a 25% penalty, if users are “Gold” members. In all other cases, the reservations will be non-refundable. Customers can pay using their credit cards or Paypal.

Upon your review complete the following:

1. Identify ALL MAJOR the tables relevant this case, the primary key, foreign keys, attributes and data types. For each table, list the fields, description, datatype and description about that field as suggested in the format below. (30 pts). (Hint: Refer to your class diagram).

2. Apply 1^st, 2^nd and 3^rd normalization rules for your tables. Explain how each table satisfies these normalization rules. (Hint: You may end up creating intersection tables as needed, in addition to the tables identified for question #1). (20 points)

(Please see normalization examples from the lecture notes and show the normalization process for the tables as applicable)

3. Draw an ER diagram for this case including the tables, relationships, cardinality and all the fields. (10 points)

FRAUDD EXAMINATION

Case 4

Stephanie Adkins is an accountant who is trained in forensic accounting. She is an experienced fraud investigator. She was recently hired by Lake Side Hotels, a closely-held corporation, to investigate a company manager who is suspected of taking kickbacks from vendors.

Stephanie gave Lake Side her standard engagement letter stating that the scope of the engagement would be limited to investigating only one suspect. It did not guarantee findings or results.

According to the provisions of Stephanie’s engagement, she was to communicate directly with Bernie James, the company’s controller, and Amanda Peterson, the outside attorney.

At the first meeting of this team, Bernie indicated that Lake Side had received four separate anonymous tips about possible kickbacks. All the tips indicated that Laurie Miller, an evening manager, was taking kickbacks from food vendors. One tip named a particular vendor, the Mid States Beef Source, a company that supplies meat to the hotel’s restaurants.

Stephanie asked if Bernie had any documentation that supports Laurie Miller’s possible involvement in kickbacks. Bernie had no documentation but hoped Stephanie could help them substantiate the information from the anonymous tips. He was concerned that kickbacks would hurt the hotel financially.

Amanda, the outside attorney, said that she had already talked to several hotel employees and was convinced that Laurie was guilty.

Kickback schemes can be difficult to uncover, so Stephanie wanted to proceed cautiously.

Bernie wanted to confront Laurie immediately. He was convinced she would confess if he told her that he had evidence against her.

Stephanie asked what evidence Bernie had. Bernie said, “Only the anonymous tips, but I know she will confess if we bluff.” It was against Stephanie’s professional principles to lie and she said so.

“Detectives do it all the time on cop shows,” Bernie said. Stephanie insisted she would need to run the investigation her way or she wouldn’t be able to undertake this engagement.

In relation to this scenario, write responses to the following:

What steps might Stephanie follow to proceed with her investigation?

What mistakes, if any, have already been made in the investigation?

Patient A - has been seen in clinic often. Does not have a job or income. Is on a state-funded medical insurance. Patient B - is a single parent who works two part time jobs to make ends meet. Neither job allows them to qualify for health insurance. Patient states they are concerned about the cost of their visit and the only reason they visited the clinic is because their boss sent them home because of their cough and they were told that they can not return to work without a doctor?s note. - Both patients present to the clinic with a cough, tightness in chest, difficulty breathing and a slight fever. As a healthcare provider you have determined that both patients are experiencing a bout of bronchitis, but there might be an underlying heart condition that has not been previously detected. You notice that there is only a slightly elevated blood pressure, but patient does have a high BMI that registers near obese levels. Both patients might also be pre-type II diabetic based on age and weight, but further testing would be needed to confirm. 1. Address the following questions in your post and response posts: A. Would both of these patients receive the same level of treatment? B. Would both patients receive the same testing? C. Do you think it is important to know the patient?s financial and insurance status prior to treatment and examination?

The Drug Company developed a new sleeping pill. The drug is called Star and was approved by the FDA in 2016. In 2017 the company began to notice problems with this drug. People who were prescribed Star reported feeling sleepy during the next day and developing a dependence on this drug. The company reacted immediately and stopped selling Star near the end of 2017. In the last six months of 2018, the company was sued by 1,000 people who experienced grogginess and dependency reaction to the sleeping pill. At the end of 2018, the company’s attorneys believe there is a 60% chance the company will need to make payments in the range of $1,000 to $5,000 to settle each claim. At the end of 2019, while none of the cases have been resolved, the company’s attorneys now believe there is an 80% chance the company will need to make payments in the range of $2,000 to $7,000 to settle each claim. In 2020, 400 claims were settled at a total cost of $1.2 million. Based on this experience, the company believes 30% of the remaining cases will be settled for $3,000 each, 50% will be settled for $5,000 and 20% will be settled for $10,000 each. The company is in the process of the first-time adoption of IFRS and needs to report under US GAAP and IFRS, as required by IFRS 1. Using US GAAP and IFRS, show what journal entries would be required in 2017, 2018, 2019 and 2020.

Sunshine Company is a calendar year accrual-basis taxpayer and is in its first year of operations. Sunshine Company had the following income, expense, and loss items for the current year:

Furthermore, Sunshine’s liabilities (all recourse) increased from $0 on 1/1 to $300,000 on 12/31 of the current year.

1. Assume that Sunshine Company is owned by Alvin as a sole proprietorship. Alvin received $2,400 per month ($28,800 in total) from Sunshine Company as an owner’s draw. Additionally, Alvin took $55,000 out of Sunshine Company near the end of the year as a partial distribution of profits. (11 points)
   1. Calculate the net business income of Sunshine Company/Alvin that would be reported on Schedule C of Alvin’s Form 1040.
   2. How much of the $2,400 per month ($28,800 total) and the $55,000 distribution would Alvin include as taxable income on his Form 1040?
   3. What amount of Alvin’s income will be subject to self-employment tax?
   4. Note that you do not need to complete Schedule C or other forms, but these form will be a useful guide in completing this portion of the assignment.                       

Meganol Company is a calendar year accrual-basis taxpayer and is in its first year of operations. Meganol Company had the following income, expense, and loss items for the current year:

Furthermore, Meganol's liabilities (all recourse) increased from $0 on 1/1 to $300,000 on 12/31 of the current year.

1. Assume that Meganol Company is owned by Thomas as a sole proprietorship. Thomas received $2,400 per month ($28,800 in total) from Meganol Company as an owner’s draw. Additionally, Thomas took $55,000 out of Meganol Company near the end of the year as a partial distribution of profits. (11 points)
   1. Calculate the net business income of Meganol Company/Thomas that would be reported on Schedule C of Thomas Form 1040.
   2. How much of the $2,400 per month ($28,800 total) and the $55,000 distribution would Thomas include as taxable income on his Form 1040?
   3. What amount of Thomas's income will be subject to self-employment tax?
   4. Note that you do not need to complete Schedule C or other forms, but these form will be a useful guide in completing this portion of the assignment.                       

Scenic Flights provides 3 hour sightseeing flights over the Eastern Sea Board along the Greet Ocean Road near Lorne Victoria. The average flight has 20 passengers on board. Each passenger pays $300 for a 2 hour scenic flight. The business averages 90 flights each year based on current demand over the weekend – Saturday and / or Sunday dependent on demand. Each flight requires two pilots who are each paid $500 per flight and two flight attendants who receive $200 each per flight. Pilots and flight attendants are employed on a casual basis only receiving payment when flights operate. Other variable costs include: inflight passenger refreshments costing $30 per passenger and fuel which costs $800 per flight. Total annual fixed costs are $150,000.

Calculate income and variable costs and contribution margin of each scenic flight.

Calculate the number of scenic flights needed to break even.

Scenic Flights would like to increase current profits by 40 percent. Calculate the number of additional flights required to meet this financial goal.

Discuss whether this increased profit target is realistic under current conditions and possible assumptions and limitations of the “cost / volume / profit model” at such higher volume levels. (word limit 40)