Reference no: EM133034836

ICTNWK546 Manage Network Security - Western Sydney College

Assessment Task 1: Knowledge Questions

Question 1: List two types of ICT networks.Include a description of their configuration in your answer.

Question 2. Complete the following table about network attacks, vulnerabilities and security technologies.
List two types of network attack. Briefly describe the type of attack.
Outline the vulnerabilities of the ICT system that may have led to each of the attacks.
List a security technology that can prevent such an attack

Question 3. With the expansion of cloud services and new technologies, the use of mobile devices and the Internet of Things (IoT), there have also emerged a number of security issues. List two examples of emerging security issues.

Question 4. Outline the terms auditing and penetration testing that can be used to measure a network's security.

Question 5. Outline two logging analysis techniques that can be used to measure the security of a network.

Question 6. Outline two types of securitymeasures that can be put in place in a network.

Question 7. List a type of software that can be used for network security and summarise its capabilities.

Question 8. List a type of hardware that can be used for network security and summarise its capabilities.

Question 9. Given the importance of network security, describe the key features that a network security policy should include, as well as procedures that should be included.

Question 10. Outline two network management and security process controls that can be put in place to ensure network security.

Question 11. Explain the importance of a risk management plan and procedures in network security implementation.

Question 12. Outline the process of developing risk management plans and procedures as part of network security planning.

Question 13. Explain how risk management should be built into cost analysis and budgeting of network security. Give an example to illustrate your answer.

Assessment Task 2: Project Portfolio

In this task, you are required to demonstrate your skills and knowledge by working through a number of activities and completing and submitting a project portfolio.

You will need access to:
• a suitable place to complete activities that replicates an ICT environment including access to network infrastructure where network security will be implemented
• network support toolsi.e. information about network security tools that can be used as part of the design
• security policies and standardse.
• manufacturer's recommendations for network security equipment (depending on the security equipment chosen for the design)
• your learning resources and other information for reference
• Project Portfolio template
• Simulation Pack (if you need a case study).

Activities
Complete the following activities:

1. Carefully read the following:
This project requires you to manage network security for an organisation.You can complete this project based on the case study organisation in the ICTNWK546 Simulation Pack or you can base it on an organisation that you are familiar with or working for. If you choose to complete the project based on a business of your choice, it is important that you can access the network infrastructure where network security will be implemented, as well as network support tools used to manage network security and security policies, standards and manufacturer's recommendations for network security equipment (see the list of information you must be able to access). Speak to your assessor to get approval if you want to base this on an organisation of your choice.
You will be collecting evidence for this unit in a Project Portfolio. The steps you need to take are outlined below.

2. Preparation
Make sure you are familiar with the organisation you are basing this assessment on and have read through the necessary background information. For the case study organisations, this is all of the documents included in the ICTNWK546 Simulation Pack. If it's your own organisation, it's important that you have this approved by your assessor.
Complete Page 4 of your Project Portfolio for this unit.
Read through the requirements of Section 1 and 2 of your Project Portfolio which include detailed guidance relevant to all the assessment activities.

3. Preparing for the security design
You are required to prepare for the network security design process, as well as identify and analyse threats and risks. This involves:
• Defining processes that needs to be followed in order to plan, build and manage network security.
• Researching and reporting on major threats to any network security, as well as their origins.
• Researching and reporting on network vulnerabilities.
• Determining current risks to the network and developing a risk management plan.
• Listing the assets that need to be protected, as well as categorising them according to their value.
Complete Section 1 of your Portfolio.

4. Create a security design and security policies
You are to create a security design to protect the network for your chosen organisation. You are also to develop and document relevant security policies which is also to include the auditing of the network, as well as how to respond to incidents. Detailed instructions are included in your Portfolio.
You are also to prepare a short presentation about the work that you have completed that can be presented to a team for feedback. If you are completing this in your RTO, this will be to a small group of students organised by your assessor. If you are completing this based on your own business, it can be a presentation to your team at work or you can also present it to a small group of students.
Your presentation should be for approximately 10 minutes.
Complete Section 2 of your Portfolio.

5. Security design presentation
Provide your presentation to your team about the security design you have developed. Make sure you provide your team the opportunity to provide feedback. Following the presentation, you will document the feedback in your Portfolio, as well as your response.
During the presentation, you are to use oral communication skills including:
• speaking clearly and concisely
• asking questions to identify required information
• responding to questions as required
• using active listening techniques to confirm understanding
• observational techniques to ensure that everyone is participating so that you can gain a range of different perspectives.

This can either be viewed in person by your assessor or you may like to video record the session for your assessor to watch later. Your assessor can provide you with more details at this step. Make sure you follow the instructions above and meet the timeframes allocated.
Following the presentation, include the feedback you received in Section 1 of your Portfolio and make amendments to your quality management plan to include the corrective action. Further report on the skills of staff, confirming their ability to meet quality standards or otherwise.

6. Submit your completed Project Portfolio
Make sure you have completed all sections of your Project Portfolio, answered all questions, provided enough detail as indicated and proofread for spelling and grammar as necessary.

Attachment:- Manage Network Security.rar