Design and implement a security perimeter for ict networks

Unit Pre-Assessment Checklist (UPAC) UAT 3 – Unit Project (UP) Purpose of the checklist The pre-assessment checklist helps students determine if they are ready for assessment. The trainer/assessor must review the checklist with the student before the student attempts the assessment task. If any items of the checklist are incomplete or not clear to the student, the trainer/assessor must provide relevant information to the student to ensure they understand the requirements of the assessment task. The student must ensure they are ready for the assessment

task before undertaking it.Section 1: Information for Students  Please make sure you have completed the necessary prior learning before attempting this

assessment.  Please make sure your trainer/assessor clearly explained the assessment process and tasks

to be completed.  Please make sure you understand what evidence is required to be collected and how.  Please make sure you know your rights and the Complaints and Appeal process.  Please make sure you discuss any special needs or reasonable adjustments to be considered

during the assessment (refer to the Reasonable Adjustments Strategy Matrix and negotiate these with your trainer/assessor).

 Please make sure that you have access to a computer and the internet (if you prefer to type the answers).

 Please ensure that you have all the required resources needed to complete this Unit Assessment Task (UAT).

 Due date of this assessment task is according to your timetable.  In exceptional (compelling and compassionate) circumstances, an extension to submit an

assessment can be granted by the trainer/assessor.  Evidence of the compelling and compassionate circumstances must be provided together

with your request for an extension to submit your assessment work.  Request for an extension to submit your assessment work must be made before the due

date of this assessment task.

Section 2: Reasonable adjustments  Students with carer responsibilities, cultural or religious obligations, English as an additional

language, disability etc. can request for reasonable adjustments.  Please note, academic standards of the unit/course will not be lowered to accommodate the

needs of any student, but there is a requirement to be flexible about the way in which it is delivered or assessed.

 The Disability Standards for Education requires institutions to take reasonable steps to enable the student with a disability to participate in education on the same basis as a student without a disability.

 Trainer/Assessor must complete the section below “Reasonable Adjustment Strategies Matrix” to ensure the explanation and correct strategy have been recorded and implemented.

 Trainer/Assessor must notify the administration/compliance and quality assurance department for any reasonable adjustments made.

 All evidence and supplementary documentation must be submitted with the assessment pack to the administration/compliance and quality assurance department.

Version Number: 1 (Review date: 01/10/2021) Unit Code: ICTNWK509 Name of the RTO: Harward International College RTO No: 22332 | CRICOS No: 03234B

Reasonable Adjustment Strategies Matrix (Trainer/Assessor to complete)

Category Possible Issue Reasonable Adjustment Strategy (select as applicable)

 LLN  Speaking  Reading  Writing  Confidence

 Verbal assessment  Presentations  Demonstration of a skill  Use of diagrams  Use of supporting documents such as wordlists

 Non- English Speaking Background

 Speaking  Reading  Writing  Cultural background  Confidence

 Discuss with the student and supervisor (if applicable) whether language, literacy and numeracy are likely to impact on the assessment process  Use methods that do not require a higher level of language or literacy than is required to perform the job role  Use short sentences that do not contain large amounts of information  Clarify information by rephrasing, confirm understanding  Read any printed information to the student  Use graphics, pictures and colour coding instead of, or to support, text  Offer to write down, or have someone else write, oral responses given by the student  Ensure that the time available to complete the assessment, while meeting enterprise requirements, takes account of the student’s needs

 Indigenous

 Knowledge and understanding  Flexibility  Services  Inappropriate training and assessment

 Culturally appropriate training  Explore understanding of concepts and practical application through oral assessment  Flexible delivery  Using group rather than individual assessments  Assessment through completion of practical tasks in the field after demonstration of skills and knowledge.

 Age  Educational background  Limited study skills

 Make sure font size is not too small  Trainer/Assessor should refer to the student’s experience  Ensure that the time available to complete the assessment takes account of the student’s needs  Provision of information or course materials in accessible format.  Changes in teaching practices, e.g. wearing an FM microphone to enable a student to hear lectures  Supply of specialised equipment or services, e.g. a note-taker for a student who cannot write  Changes in lecture schedules and arrangements, e.g. relocating classes to an accessible venue  Changes to course design, e.g. substituting an assessment task  Modifications to physical environment, e.g. installing lever taps,

Version Number: 1 (Review date: 01/10/2021) Unit Code: ICTNWK509 Name of the RTO: Harward International College RTO No: 22332 | CRICOS No: 03234B

building ramps, installing a lift  Educational background

 Reading  Writing  Numeracy  Limited study skills and/or learning strategies

 Discuss with the Student previous learning experience  Ensure learning and assessment methods meet the student’s individual need

 Disability  Speaking  Reading  Writing  Numeracy  Limited study skills and/or learning strategies

 Identify the issues  Create a climate of support  Ensure access to support that the student has agreed to  Appropriately structure the assessment  provision of information or course materials in accessible format, e.g. a text book in braille  Changes in teaching practices, e.g. wearing an FM microphone to enable a student to hear lectures  Supply of specialised equipment or services, e.g. a note taker for a student who cannot write  Changes in lecture schedules and arrangements, e.g. relocating classes to an accessible venue  Changes to course design, e.g. substituting an assessment task  Modifications to physical environment, e.g. installing lever taps, building ramps, installing a lift

Explanation of reasonable adjustments strategy used (If required)

Version Number: 1 (Review date: 01/10/2021) Unit Code: ICTNWK509 Name of the RTO: Harward International College RTO No: 22332 | CRICOS No: 03234B

Unit Assessment Task (UAT) Assessment Task 3 – Unit Project (UP) Assessment type:

Unit Project (UP)

Assessment task description:  This is the third (3) assessment task you have to successfully complete to be deemed

competent in this unit of competency.  This assessment task requires you to complete a project.  You will receive your feedback within two weeks - you will be notified by your

trainer/assessor when results are available.  You must attempt all activities of the project for your trainer/assessor to assess your

competency in this assessment task.

Applicable conditions:  This project is timed except activity 2.  You must read and respond to all criteria of the project.  You may handwrite/use computers to answer the criteria of the project.  You must complete the task independently.  No marks or grades are allocated for this assessment task. The outcome of the task will be

Satisfactory or Not Satisfactory.  As you complete this assessment task you are predominately demonstrating your practical

skills, techniques and knowledge to your trainer/assessor.  The trainer/assessor may ask you relevant questions on this assessment task to ensure that

this is your own work.

Resubmissions and reattempts:  Where a student’s answers are deemed not satisfactory after the first attempt, a

resubmission attempt will be allowed.  You must speak to your Trainer/Assessor if you have any difficulty in completing this task

and require reasonable adjustments (e.g. can be given as an oral assessment).  For more information, please refer to your RTO Student Handbook.

Location:  This assessment task may be completed in a simulated learning environment.  Your trainer/assessor will provide you further information regarding the location of

completing this assessment task.

General Instructions for attempting the project:  This assessment task is in continuation to the previous task.  You will be analyse the existing security plan, create new plan, encrypt the data, and check

the system log to check for data compromises in this assessment task.  You will be expanding the knowledge and skills acquired during the previous assessment

task.  Instructions analyse the existing security plan, create new plan, encrypt the data, and check

the system log to check for data compromises are provided within the assessment task.  You will be required to correctly attempt all activities of this assessment task.

Version Number: 1 (Review date: 01/10/2021) Unit Code: ICTNWK509 Name of the RTO: Harward International College RTO No: 22332 | CRICOS No: 03234B

How your trainer/assessor will assess your work?  This assessment task requires the student to successfully complete and submit a project.  Answers must demonstrate the student’s understanding and skills of the unit.  You will be assessed according to the provided performance checklist/ performance criteria.  Assessment objectives/ measurable learning outcome(s) are attached as performance

checklist/ performance criteria with this assessment task to ensure that you have successfully completed and submitted the assessment task.

 If all assessment tasks are deemed Satisfactory (S), then the unit outcome is Competent (C).  If at least one of the assessment task is deemed Not Satisfactory (NS), then the unit outcome

is Not Yet Competent (NYC).  Once all assessment tasks allocated to this Unit of Competency have been undertaken,

trainer/assessor will complete an Assessment plan to record the unit outcome. The outcome will be either Competent (C) or Not Yet Competent (NYC).

 The “Assessment Plan” is available with the Unit Assessment Pack (UAP) – Cover Sheet.

Purpose of the assessment task:

This assessment task is designed to evaluate your following skills and abilities:  Ability implement encryption systems and inform users of any impacts  Skill to monitor and document encryption issues and compromises, and notify appropriate

person.

Version Number: 1 (Review date: 01/10/2021) Unit Code: ICTNWK509 Name of the RTO: Harward International College RTO No: 22332 | CRICOS No: 03234B

Assessment Task 3 - Unit Project (UP) Instructions to complete this assessment task:

 Please write your responses in the template provided.  You may attach a separate sheet if required.  You must include the following particulars in the footer section of each page of the attached

sheets: o Student ID or Student Name o Unit ID or Unit Code o Course ID or Course Code o Trainer and assessor name o Page numbers

 You must staple the loose sheets together along with the cover page.  You must attach the loose sheets chronologically as per the page numbers.  Correction fluid and tape are not permitted. Please do any corrections by striking through

the incorrect words with one or two lines and rewriting the correct words.  The premise of the project must be closely related to the previous assessment task.  This submission must be well presented and follow the guidelines and instructions provided.  Please follow the format as indicated in the template section below.  One of the most important steps that you can take: proofread your project.  Project must be of 500-800 words in length, using 11-point font, double-spaced, and must

include a cover page, table of contents, introduction, body, summary or conclusion, and works cited.

 Appropriate citations are required.  All RTO policies are in effect, including the plagiarism policy.

Resources required to complete the assessment task:  Computer  Internet  MS Word

Version Number: 1 (Review date: 01/10/2021) Unit Code: ICTNWK509 Name of the RTO: Harward International College RTO No: 22332 | CRICOS No: 03234B

Activity 1 - (Deployment of the Perimeter security)

This activity is a continuing from the previous assessment task.

After the detailed elaboration of the requirements for the network security perimeter and completion of the planning phase by completing the Report, you need to deploy the perimeter security. For this it has been decided by the IT department that they will implement the Firewall for the better security of the organisation’s network infrastructure. The Report in the previous task defines its importance. The Assessor/trainer will act as the Information Systems Manager and will supervise the deployment of the perimeter security. While, you need to implement the firewall as per the requirements of the organisation.

Note: For This activity RTO/Assessor will provide you the following:

 A site where perimeter installation may be conducted  Cabling  Networked (LAN) computers  Site or prototype where perimeter security may be implemented and managed  Perimeter devices  Organisational security requirements.

You need to implement the Perimeter security solution as per the given points:

 Implement the Firewall as the perimeter device and make all the configurations as per the requirements of the design

o Configure the DMZ interface o Configure a general firewall for LAN traffic o Configure a general firewall for DMZ traffic o Allow selected traffic to the DMZ

 For the setup of the organisation and as per the scenario it is recommended to implement 3 legged Firewall

 Configure both the basic and advanced functionality of the firewall to the network to allow access including the following standard services considerations in prospect:

o HTTP (Web surfing) o HTTPS (secure HTTP) o FTP (file transfers) o SMTP (e-mail) o ICMP (reporting services; ping) o Telnet (bi-directional communication sessions)

 Configure the backup of the firewall so that it can be restored in case of disaster  The firewall needs to be designed and configured that it ensure the continuity of services in

both the following events: o Update of Device o Device Failure

Version Number: 1 (Review date: 01/10/2021) Unit Code: ICTNWK509 Name of the RTO: Harward International College RTO No: 22332 | CRICOS No: 03234B

Performance criteria checklist for unit assessment task:

Trainer/ Assessor to complete Assessment activities to be completed

 Deployment of the Perimeter security  For a full project outline, please refer to the student

assessment instructions Resources required for the unit assessment task

 Unit assessment guide template  Access to live or simulated working environment  Interaction with others

Does the candidate meet the following criteria

Yes No Trainer/Assessor Comments

Implemented the Firewall as Perimeter security

Configured the DMZ interface

Configured the Firewall for LAN and DMZ

Implemented the three legged Firewall

Configured both the basic and advanced functions of Firewall

Backed up the device configuration

 Designed and Configured for continuity of Service

Version Number: 1 (Review date: 01/10/2021) Unit Code: ICTNWK509 Name of the RTO: Harward International College RTO No: 22332 | CRICOS No: 03234B

Activity 2: (Configuration of a VPN Solution)

TASK 1: Continuation to the previous tasks, you need to implement and configure a VPN solution for the organisation’s network infrastructure. The VPN solution will help to secure the connectivity of the HBL Bank’s head office to the regional offices. The assessor/trainer will supervise the implementation and the configuration of the VPN solution. You will act as the Network administrator and will implement the VPN solution:

Note: For This activity RTO/Assessor will provide you the following:

 A site where perimeter installation may be conducted  Cabling  Networked (LAN) computers  Site or prototype where perimeter security may be implemented and managed  Perimeter devices  Organisational security requirements.

You need to implement the Virtual Private Network solution as per the given points:

 Configure a site to site Virtual Private Network for the network infrastructure  Configure the perimeter as a remote access VPN server according to the scenario and the

network diagram of the bank  Also, configure the VPN tunnel forwarding  Check the configured VPN for connectivity issues, diagnose the issues and resolve these

connectivity issues

Version Number: 1 (Review date: 01/10/2021) Unit Code: ICTNWK509 Name of the RTO: Harward International College RTO No: 22332 | CRICOS No: 03234B

TASK 2: (Testing of the Perimeter Solution)

In continuation of the Task 1, perform the testing of the VPN solution. The testing will help to not only resolve the VPN issues but will also help to enhance the performance of the perimeter device security. The trainer/assessor will act as the Information Systems Manager and will supervise the testing process. Once the testing is done, you need to design a report on the tests results. You need to perform the following tasks for the testing task and also need to complete the template given below for test results:

 Test the basic and advanced functionality of the VPN and Firewall features  Conduct penetration testing in order to confirm the requirements of the security  Monitor the performance of the perimeter device along with the monitoring of the security

breaches  Prepare the report as per the given template for the tests results and forward it to the

relevant personal for sign off.

Template for Report on TEST Results:

Purpose:

Stakeholders:

Roles and Responsibilities: Role Responsibilities Contact Information

Scope of Testing

Version Number: 1 (Review date: 01/10/2021) Unit Code: ICTNWK509 Name of the RTO: Harward International College RTO No: 22332 | CRICOS No: 03234B

Assumptions for Test Execution

Test Completion

Security requirements analysis

Test Results Report Approval Signatures

I have reviewed the {System Name} Test Results Report and accept the analysis and findings within.

_______________________________________ __________

Version Number: 1 (Review date: 01/10/2021) Unit Code: ICTNWK509 Name of the RTO: Harward International College RTO No: 22332 | CRICOS No: 03234B

{Security Control Assessor Full Name} Date

Security Control Assessor

_______________________________________ __________

{System Owner Full Name} Date

System Owner

_______________________________________ __________

{Information System Security Officer Full Name}

Date

Information System Security Officer

_______________________________________ __________

{Privacy Coordinator Full Name} Date

Privacy Coordinator

Version Number: 1 (Review date: 01/10/2021) Unit Code: ICTNWK509 Name of the RTO: Harward International College RTO No: 22332 | CRICOS No: 03234B

Performance criteria checklist for unit assessment task:

Trainer/ Assessor to complete Assessment activities to be completed

 Configuration of a VPN Solution  Testing of the Perimeter Solution  For a full project outline, please refer to the student

assessment instructions Resources required for the unit assessment task

 Unit assessment guide template  Access to live or simulated working environment  Interaction with others

Does the candidate meet the following criteria

Yes No Trainer/Assessor Comments

Configured a Site to Site VPN

Configured Perimeter as Remote Access VPN server

Tested the VPN functionality

Conducted the penetration testing

Monitored the performance of Perimeter device

Completed the template for Tests Results

Got approval by sign off from

Version Number: 1 (Review date: 01/10/2021) Unit Code: ICTNWK509 Name of the RTO: Harward International College RTO No: 22332 | CRICOS No: 03234B

the authority

Version Number: 1 (Review date: 01/10/2021) Unit Code: ICTNWK509 Name of the RTO: Harward International College RTO No: 22332 | CRICOS No: 03234B

Unit Assessment Result Sheet (UARS) Assessment Task 3 – Unit skills test (UST) Student and Trainer/Assessor Details Unit code ICTNWK509

Unit name Design and implement a security perimeter for ICT networks

Outcome of Unit Assessment Task (UAT)

First attempt:

Outcome (please make sure to tick the correct checkbox): Satisfactory (S) ☐ or Not Satisfactory (NS) ☐

Date: _______(day)/ _______(month)/ ____________(year)

Second attempt:

Outcome (please make sure to tick the correct checkbox): Satisfactory (S) ☐ or Not Satisfactory (NS) ☐

Date: _______(day)/ _______(month)/ ____________(year)

Feedback to Student  First attempt:

 Second attempt:

Student Declaration  I declare that the answers I have provided are my own work.

Where I have accessed information from other sources, I have provided references and or links to my sources.

 I have kept a copy of all relevant notes and reference material that I used as part of my submission.

 I have provided references for all sources where the information is not my own. I understand the consequences of

Version Number: 1 (Review date: 01/10/2021) Unit Code: ICTNWK509 Name of the RTO: Harward International College RTO No: 22332 | CRICOS No: 03234B

falsifying documentation and plagiarism. I understand how the assessment is structured. I accept that all work I submit must be verifiable as my own.

 I understand that if I disagree with the assessment outcome, I can appeal the assessment process, and either re-submit additional evidence undertake gap training and or have my submission re-assessed.

 All appeal options have been explained to me. Student Signature

Date

Trainer/Assessor Name

Trainer/Assessor Declaration

I hold:

 Vocational competencies at least to the level being delivered

 Current relevant industry skills

 Current knowledge and skills in VET, and undertake

 Ongoing professional development in VET

I declare that I have conducted an assessment of this candidate’s submission. The assessment tasks were deemed current, sufficient, valid and reliable. I declare that I have conducted a fair, valid, reliable, and flexible assessment. I have provided feedback to the above- named candidate.

Trainer/Assessor Signature

Date

Office Use Only Outcome of Assessment has been entered onto the Student Management System on _________________ (insert date)

by (insert Name) __________________________________