You have been hired as a security consultant for Gray. You need to respond to the following queries in your initial meeting with Gray:

What are the possible security threats to the online trading portal? Who would be interested in attacking the portal? Why?

How may these security threats be mitigated? What are a few strategies that can be used to deter or prevent unauthorized use? At this point, these suggestions can be preliminary and non-technical, but they should suggest means of preventing or deterring attack on the system.

Gray does not realize that there are security threats to his current business model as well. Respond to the following questions related to the security concerns in Gray's business model:

What possible threats exist on free e-mail services? Consider the possible gain an attacker may have from attacking this system and enumerate several reasons why this would be a viable attack. Consider the risk of getting caught attacking this system. When would the payout make the attack worthwhile to the attacker? What factors would make this an undesirable target?

How is the free e-mail service different from the share trading portal? Analyze which of these systems represents a greater potential gain for the attacker and justify your conclusion. Which system carries more associated risk to complete the attack? Give examples to justify your answer.

What is the benefit of installing a Network Security Appliance (NSA) ?

Why is it important to verify that the servers and network components are still functioning properly after adding the device?

Why is placement of the device within the network critical to its proper use?