question answer

Student ID

Student name

Trainer/Assessor name

Course code

Course name

Unit code

ICTNWK546

Unit name

Manage network security

☐ By hand to trainer/assessor

☐ By email to trainer/assessor

☐ Online submission via Learning Management System (LMS)

☐ By Australia Post to RTO

☐ Any other method _________________________________________________

(Please mention here)

· I certify that the work submitted for this assessment pack is my own. I have clearly referenced any sources used in my submission. I understand that a false declaration is a form of malpractice.

· I have kept a copy of this assessment pack and all relevant notes, attachments, and reference material that I used in the production of the assessment pack;

· For the purposes of assessment, I give the Trainer/Assessor of this assessment the permission to:

· Reproduce this assessment and provide a copy to another member of staff; and

· Take steps to authenticate the assessment, including communicating a copy of this assessment to a checking service (which may retain a copy of the assessment on its database for future plagiarism checking).

Evidence recorded

Evidence Type/ Method of assessment

Sufficient evidence recorded/Outcome

Unit Assessment Task 1

Unit Knowledge Test (UKT)

S / NS (First Attempt)

S / NS (Second Attempt)

Unit Assessment Task 2

Unit Project (UP)

S / NS (First Attempt)

S / NS (Second Attempt)

Final result

C ☐ NYC ☐

Date assessed

Trainer/Assessor Signature

The student and Trainer/Assessor must read and understand all the information in the unit information pack before completing the unit assessment pack.

UAT 1 – Unit Knowledge Test (UKT)

Student signature

Date

Assessment task instructions

☐ Learning Management System

☐ Classroom

☐ Simulated learning environment

☐ Workplace

Other: ____________________________________

Resources required to complete the assessment task:

Question 1: Answer the following:

A.) What is meant by the term ICT networks? The answer must be between 40-80 words.

B.) Briefly explain the following standard ICT networks:

· LAN

· WAN

· VPN

The answer must be between 40-80 words.

C.) Provide detailed information about the configuration of the following networks:

· LAN

· WAN

Answer must be between 100-150 words.

Please answer question A-C in the space below.

Satisfactory response

A.) Yes ☐

B.) Yes ☐

C.) Yes ☐

No ☐

No ☐

No ☐

Question 2: Answer the following:

B.) Provide a brief description of the common attacks and vulnerabilities on the network:

· Phishing attack

· SQL injection

· Malware

Answer must be between 100-150 words.

B.) Provide detailed information about the following weaknesses which are associated with the installation of the infrastructure:

· Unauthentic protocols

· Weak user authentication

· Outdated hardware

Answer must be between 100-150 words.

Satisfactory response

A.) Yes ☐

B.) Yes ☐

No ☐

No ☐

Question 3: Answer the following:

A.) Provide detailed information about the following emerging security issues: (150-200 words)

· Data breaches

· Ransomware threat

· Cyberattack

B.) Briefly explain the following security technologies used by the IT organisation to deal with the threats: (150-200 words)

· Firewall

· Data loss prevention

· Antivirus

Satisfactory response

A.) Yes ☐

B.) Yes ☐

No ☐

No ☐

Question 4: Briefly explain the following security measures for the network:

· Auditing in network security

· Penetration testing technique

· Logging analysis technique

· Network infrastructure security

Answer must be between 100-150 words.

Satisfactory response

Yes ☐

No ☐

Question 5: Answer the following:

A.) What are the advantages of having security policies and procedures? The answer must be between 80-130 words.

B.) Briefly explain the network management process. The answer must be between 20-50 words.

C.) Provide a brief summary of the security control processes used for network security. The answer must be between 20-50 words.

D.) Provide a brief description of the following software and hardware used in network security:

· Router

· Firewall

· Cisco umbrella

· Webroot DNS protection

The answer must be between 150-200 words.

Satisfactory response

A.) Yes ☐

B.) Yes ☐

C.) Yes ☐

D.) Yes ☐

No ☐

No ☐

No ☐

No ☐

Question 6: Answer the following:

A.) What being a risk management plan and its’s importance? The answer must be between 50-100 words.

B.) Briefly explain network security planning. The answer must be between 20-50 words.

C.) How does network security planning help in resolving security issues related to the network? Answer must be between 100-150 words.

D.) Briefly explain the implementation process of network security. The answer must be between 150-200 words.

E.) What is the role of cost analysis and budgeting in network security? The answer must be between 40-80 words.

Satisfactory response

A.) Yes ☐

B.) Yes ☐

C.) Yes ☐

D.) Yes ☐

E.) Yes ☐

No ☐

No ☐

No ☐

No ☐

No ☐

Question 7: Briefly explain the steps involved in the designing of network security. The answer must be between 150-200 words.

Satisfactory response

Yes ☐

No ☐

Question 8: What is the main cause of network threats? Answer must be between 100-150 words.

Satisfactory response

Yes ☐

No ☐

Question 9: List the important assets of the organisation which requires network security.

Satisfactory response

Yes ☐

No ☐

Question 10: Provide a brief description of a network security policy. The answer must be between 50-100 words.

Satisfactory response

Yes ☐

No ☐

Question 11: List the different methods which can be used to obtain feedback from the clients and senior management.

Satisfactory response

Yes ☐

No ☐

Question 12: Briefly explain the components involved in the incident response procedure. Answer must be between 100-150 words.

Satisfactory response

Yes ☐

No ☐

Unit Assessment Result Sheet (UARS)

Outcome of Unit Assessment Task (UAT)

Outcome (please make sure to tick the correct checkbox):

Satisfactory (S) ☐ or Not Satisfactory (NS) ☐

Date: _______(day)/ _______(month)/ ____________(year)

Outcome (please make sure to tick the correct checkbox):

Satisfactory (S) ☐ or Not Satisfactory (NS) ☐

Date: _______(day)/ _______(month)/ ____________(year)

Feedback to Student

Student Declaration

· I declare that the answers I have provided are my own work. Where I have accessed information from other sources, I have provided references and or links to my sources.

· I have kept a copy of all relevant notes and reference material that I used as part of my submission.

· I have provided references for all sources where the information is not my own. I understand the consequences of falsifying documentation and plagiarism. I understand how the assessment is structured. I accept that all work I submit must be verifiable as my own.

· I understand that if I disagree with the assessment outcome, I can appeal the assessment process, and either re-submit additional evidence undertake gap training and or have my submission re-assessed.

· All appeal options have been explained to me.

Student Signature

Date

Trainer/Assessor Name

Trainer/Assessor Declaration

I hold:

Vocational competencies at least to the level being delivered

Current relevant industry skills

Current knowledge and skills in VET, and undertake

Ongoing professional development in VET

I declare that I have conducted an assessment of this candidate’s submission. The assessment tasks were deemed current, sufficient, valid, and reliable. I declare that I have conducted a fair, valid, reliable, and flexible assessment. I have provided feedback to the above-named candidate.

Trainer/Assessor Signature

Date

Office Use Only

Outcome of Assessment has been entered onto the Student Management System on _________________ (insert date)

by (insert Name) __________________________________

UAT 2 – Unit Project (UP)

Student signature

Date

Assessment task instructions

☐ Learning Management System

☐ Classroom

☐ Simulated learning environment

☐ Workplace

Other: ____________________________________

Resources required to complete the assessment task:

Scenario:

Future IT is an IT company that provides different IT services such as application development, technical issues resolution, software support, Internet services, database services, and others. It operates across Australia with branches in major cities such as Melbourne, Sydney, Perth, and Brisbane.

It has around 133,240 clients and has been providing services to them for the last five years. The company has been consistent with providing services and is giving tough competition in the industry.

Future IT has observed in recent years that the company needs to implement new Network security mechanisms to protect not only the official data but also the confidential information of hundreds and thousands of their clients. The network includes the LAN that connects the desktops, laptops, scanners, printers, login machines, and all the handheld and BYOD (Bring Your Own Device). Also, a WAN has been implemented to connect the regional offices to the head office.

It has been decided by the management to analyse the security of the ICT network implemented at the head office using the converging switching and transmission technologies in LAN and WAN, broadband networks, VoIP, IPTV, and virtual networks.

The network is illustrated in the below-given network diagram to make it easy for the analysis and application of network security:

Future IT has decided to gather information about the common network threat to which they are exposed too. During the research, Future IT has identified that they are exposed to the following risks:

· Malware

· Phishing

· SQL injection

· Denial of service attack

The cause behind the threats is due to the following:

· Poor network security

· No firewall

· Expired Antivirus software

Future IT have also identified the vulnerabilities to the network, which are:

· Hardware-based

· Software-based

· Human-based

The sources from which Future IT has gathered the information are listed below:

· National government

· Industrial spies

· Organised crime groups

· Business competitors

Future IT has also identified the legislation associated with cybersecurity, which they can implement on the system and prevent it. The legislations are:

· Cybercrime Act 2001

· Privacy Act

· Security of critical infrastructure Act 2018

During the research, Future IT has identified that they need to implement the following equipment to secure network and data sources from cyber threats:

· Firewall

· Antivirus software

· VPN

· Access control

Future IT is aware that they must use the following components to design network security:

· Firewall

· Antivirus system

· Router

· Switch

· Cables

· Servers (DNS, email, SQL, Web)

Apart from that, Future IT is going to implement the following security measures:

· Train staff about the common cyber attacks

· Implement firewall

· Install antivirus system

· Install VPN

· Use strong passwords and secure connection

· Future IT is going to use the following risk matrix to identify the likelihood and impact of the risk on the network:

You have joined Future IT as a network security specialist. You need to go through the scenario and research on the internet prior to the start of the activity.

Activity 1: Security design plan

Your task

In this activity, you need to develop a plan for the security design of the network by defining the planning, building, managing phase.

The plan needs to include the following:

· Information about network security

· The planning phase for the network security design

· Building phase for the network security design

· Managing phase for the network security design

· Organisational requirements for the network security plan

While developing the plan, you need to consider and adhere to the organisational requirements for the network security design provided in the scenario.

You will be required to complete and/or attach.

You are required to prepare a report for threat model for the network security as per given instructions.

You need to conduct research based on the provided scenario and complete the template.

Once the template is completed, you need to submit it to the trainer.

Template: Network security design

Information about network security

Organisational requirements for the network security plan

The planning phase for the network security design

Building phase for the network security design

Managing phase for the network security design

Activity 2: Identification of threats to network security

Your task.

In this activity, you need to prepare a report for the threat model for the network security containing information about the threats to the network, origin of the threat, and common vulnerabilities to the network.

The threat model needs to have the following information:

· Major threats to network

· Cause of the threat

· Vulnerability to the network

· Types of vulnerabilities to the network

· Store the model under the name ‘StudentID_threatmodel’

You will be required to complete.

You are required to prepare a report for threat model for the network security as per given instructions.

You need to conduct research based on the provided scenario and complete the template.

Once the template is completed, you need to submit it to the trainer.

Template: Threats to network security

Purpose of the report

Major threats to network

Cause of the threat

Vulnerability to the network

Types of vulnerabilities to the network

Activity 3: Analysing security risk

Your task.

In this activity, you need to develop a risk management plan to analyse the risk associated with the network and categorise them based upon the cause and impact.

The plan needs to cover the following information:

· The risk associated with network security

· Likelihood and impact of the risk

· Assets that will be impacted by the risk

You need to save the risk management plan under the name SudentID_riskplan. The plan needs to be documented according to the organisational policies and procedures.

You will be required to complete.

You are required to identify security risks and complete the provided risk management plan.

You need to conduct research based on the provided scenario and complete the template.

Once the template is completed, you need to submit it to the trainer.

Template: Risk management plan

Threat

Vulnerability

Asset

Likelihood

Impact

Risk

Control measures

Activity 4: Developing security design and incident response plan

Your task.

Students will need to develop a security design and policies for network security and design the auditing and incident response plan for network security.

In the plan, you need to cover the following:

· Develop a network security plan to counter threats

· Security components involved in the network security plan

· Security measures to considered

· Develop security policies for network security

· Design auditing plan for network

· Design incident response plan

You will be required to complete.

You are required to prepare a security design based on the instructions provided in the scenario.

You need to conduct research based on the provided scenario and complete the template.

Once the template is completed, you need to submit it to the trainer.

Template: Security design and incident response plan

Develop a network security plan to counter threats

Security components involved in the network security plan

Security measures to considered

Develop security policies for network security

Design auditing plan for network

Design incident response plan

Activity 5: Documentation submission and gathering feedback

Your task.

Conduct a meeting with your manager to submit the documents developed in the previous activity and obtain feedback.

You will act as a network designer who will provide all the documents developed in the previous activities. You need to explain security design and policies to the manager. You also need to discuss auditing and incident response plans for network security and obtain feedback from the manager regarding the changes that need to be made in the document. After collecting the feedback, you need to provide information on what changes you will make in the document.

Your classmates will act as a manager who will go through the document submitted by you and will ask questions on the design of the network security and policies. He/she will also provide you with feedback about the changes required in the document.

In the meeting, you need to discuss the following:

· Submit documents created in the previous activity

· Discuss the submitted documents

· Discuss security design and policies

· Discuss the steps involved in auditing and incident response plan

· Obtain feedback

· Discuss how feedback will be address

· Ask questions to clarify doubts

You will be required to complete.

You are required to conduct a meeting as per the above task requirements and complete the following meeting minutes template.

Submit the completed meeting minutes document to your Trainer/Assessor

Your Trainer/Assessor will observe your performance and complete the following performance checklist.

Timeframe

You need to complete the meeting within 7-10 minutes.

Meeting minute template

Minutes of Meeting

Meeting Objective:

Attendees:

Venue:

Date:

No

Points Discussed

Actions Suggested

Target Date

Performance criteria checklist for unit assessment task:

Trainer/ Assessor to complete

Does the candidate meet the following criteria

Yes

No

Trainer/Assessor Comments

Conduct a meeting:

· Submitted documents created in the previous activity

· Discussed the submitted documents

· Discuss the threat model

· Discuss risk management plan

· Discussed security design and policies

· Highlighted policies for security design

· Discussed steps involved in auditing and incident response plan

· Obtained feedback

· Gathered details about changes to make the documents

· Discussed how feedback will be address

· Asked questions to clarify doubts

· Completed the given meeting minutes template.

· Completed the meeting in the given timeframe.

· Use active listening to understand the manager's point of view.

· Allow other people to discuss the issues

Unit Assessment Result Sheet (UARS)

Outcome of Unit Assessment Task (UAT)

Outcome (please make sure to tick the correct checkbox):

Satisfactory (S) ☐ or Not Satisfactory (NS) ☐

Date: _______(day)/ _______(month)/ ____________(year)

Outcome (please make sure to tick the correct checkbox):

Satisfactory (S) ☐ or Not Satisfactory (NS) ☐

Date: _______(day)/ _______(month)/ ____________(year)

Feedback to Student

Student Declaration

· I declare that the answers I have provided are my own work. Where I have accessed information from other sources, I have provided references and or links to my sources.

· I have kept a copy of all relevant notes and reference material that I used as part of my submission.

· I have provided references for all sources where the information is not my own. I understand the consequences of falsifying documentation and plagiarism. I understand how the assessment is structured. I accept that all work I submit must be verifiable as my own.

· I understand that if I disagree with the assessment outcome, I can appeal the assessment process, and either re-submit additional evidence undertake gap training and or have my submission re-assessed.

· All appeal options have been explained to me.

Student Signature

Date

Trainer/Assessor Name

Trainer/Assessor Declaration

I hold:

Vocational competencies at least to the level being delivered

Current relevant industry skills

Current knowledge and skills in VET, and undertake

Ongoing professional development in VET

I declare that I have conducted an assessment of this candidate’s submission. The assessment tasks were deemed current, sufficient, valid, and reliable. I declare that I have conducted a fair, valid, reliable, and flexible assessment. I have provided feedback to the above-named candidate.

Trainer/Assessor Signature

Date

Office Use Only

Outcome of Assessment has been entered onto the Student Management System on _________________ (insert date)

by (insert Name) __________________________________