Need to do the application security labs assignments

Part 1. View Existing ACLs on a Windows System

11. Make a screen capture showing the current permissions for the HRfiles folder and paste it into the Lab Report file.

12. Make a screen capture showing the current permissions for the MGRfiles folder and paste it into the Lab Report file.

Part 2. Modify ACLs using Icacls.exe

8. In your Lab Report file, compare the results of the icacls.exe command with the ACLS you documented in Part 1 of this lab. Do they match?

11. In the Lab Report file, compare the new results of this command with the results from step 7.:

12. Make a screen capture of the icacls.exe results showing the changes you made to the SFfiles folder permissions and paste it into the Lab Report file.

.14. Make a screen capture of the icacls.exe results showing the changes you made to the HRfiles folder permissions and paste it into the Lab Report file.

16. Make a screen capture of the icacls.exe results showing the changes you made to the MGRfiles folder permissions and paste it into the Lab Report file.

Part 3. Validate ACL Settings

14. Make a screen capture showing the modified text file in the SFfiles folder and paste it into the Lab Report file.

16. Make a screen capture showing the modified text file in the HRfiles folder and paste it into the Lab Report file.

17. Repeat steps 2-14 using the SFManager account.

· Make a screen capture showing the modified text file in the SFfiles folder and paste it into the Lab Report file.

· Make a screen capture showing the modified text file in the MGRfiles folder and paste it into the Lab Report file.

SECTION 2: Applied Learning

Part 1. Modify a Script to Add a New User

3. Make a screen capture showing the new user account in this script and paste it into your Lab Report file.

Part 2. Modify a Script to Add a New Group

5. Make a screen capture showing the modifications you made to the script and paste it into the Lab Report file.

Part 3. Modify Permissions Using a Script

2. Make a screen capture showing the current contents of the TargetWindows01 C: drive and paste it into the Lab Report file.

Part 4. Create Directories Using a Script

3. Make a screen capture showing the modifications to the final part of the script and paste it into the Lab Report file.

10. Make a screen capture showing the contents of the new LabDocuments2 directory and paste it into your Lab Report file.

12. Make a screen capture showing the permissions for the ISSA01 security group and paste it into your Lab Report file.

15. Make a screen capture showing the members of the ISSA01 security group and paste it into your Lab Report file.

Analysis and Discussion

1. Explain how the principle of least privilege can be used in a corporate setting to protect corporate resources.

Tools and Commands

13. Research ACLs on the Internet and determine what permissions are required to rename existing files.

Challenge Exercise

14. Throughout this lab, you applied the Modify right to all of the groups/users equally. In a real-world organization, each group or user is granted the rights that are necessary to complete their job. Those rights may not be exactly the same as every other person in their department or sharing their same title.

Use the icacls.exe utility to add the Delete right (D) to only the managers in this organization. Review the Access Controls Criteria table from Part 2 of this lab to determine which folders should be changed and which users or groups should be modified. Describe the choices you’ve made and use screen captures to document your changes, and the success/failure of that change.

Copyright © 2017 by Jones & Bartlett Learning, LLC, an Ascend Learning Company. All rights reserved. www.jblearning.com Student Lab Report