In-class discussion questions for Apr 1

We will discuss these questions on Wed, Apr 1. Do not pose comments on this.

• Why can’t IVK figure out whether an intrusion occurred or something else happened?
• What is the “rush-a-change-into-production” thing? (p. 166)
• For Cho to find evidence of an intrusion, what does he need?
• What would be the ramifications of this crash? (Imagine the worst.)
• Why did Mr. Wells, IVK VP of Legal, demand to pull the plugs?
• How would you explain “wipe production servers clean, and rebuild the production configuration” (p. 170) to Mr. Williams?