ASSESSMENT RECORD / FEEDBACK SHEET
Course: ICA60211 Advanced Diploma of IT - Network Security
Name: Student ID:
Unit Name and Code: ICANWK604A Plan and configure advanced internetwork switching solutions
Assessment Task Number and Title: Case study and short answer questions
Date Due: Trainer’s Name:
All assessments must be in a neat and readable format.
Students are required to retain a duplicate of any assignment submitted, both written & disk copy.
Please refer to the Student Handbook for the Assessment Policy.
Plagiarism is an academic misconduct and is unacceptable to Pacific College of Technology.
I certify that the work submitted is my own. I have acknowledged material taken from websites, textbooks and articles.
Student’s Signature: Date Submitted:
Feedback
Signed (Trainer/Assessor) Date:
Feedback provided by the trainer Date:
Please retain this as proof of submission
Unit name: Plan and configure advanced internetwork switching solutions Assignment No: Case Study
Received By: Date:
Course : ICA60211 Advanced Diploma of Network Security
Unit code and name : ICANWK604A Plan and configure advanced internetwork switching solutions
Trainer/Assessor :
Assessment item : Case Study and short answer questions
Due date : Week 8 (Extension upon trainer’s approval only)
Context and purpose of the assessment:
This assessment will assess your skills and knowledge in the area of 'Plan and configure advanced internetwork switching solutions’. This assessment activity deals with the following elements of performance and critical aspects of evidence:
Task Element Performance Criteria
1-4 1, 2, 3, 4 1.1, 1.2, 1.3, 1.4, 2.1, 2.2, 2.3, 2.4, 2.5, 3.1, 3.2, 4.1, 4.2, 4.3, 4.4, 4.5
o The assessment tasks for the unit assume that you will work in the Information Technology industry. Case study and short answer questions used in this assessment reflect a workplace scenario.
o The student must have access to a computer, printer and Microsoft office suite applications for doing the assessment for this unit.
o If you are not sure about any aspect of this assessment, please ask for clarification from your assessor. If the assessment is not satisfactory, the trainer will allow one more attempt to the assessment item.
o The responses to assessment questions should be in your own words and examples from
workplace should be used wherever possible.
Case Study - Securing the Network with VLANs
Acme Financial Systems (name changed), wants to improve the overall security of their network. Our role was to determine an area of the network that was at significant risk, evaluate potential solutions and recommend one, and help implement the solution.
Acme’s perimeter defenses were pretty sound. Internally, however, we determined their “wide-open” network left them vulnerable to well-known threats. We wanted to deploy an internal firewall to control the flow of traffic between different zones on the network. After evaluating several options, we decided implementing VLANs and using a router with access lists to control the traffic flow was our solution of choice. While there is still work to do, as is the case with any security solution, we were able to improve the overall security of their network.
The details of case study can be found in Pacific College Management System (PCMS) resources.
Assessment Activity: - Complete the following four (4) tasks in your own words. You are required to prepare and submit each question and answer in detail, explaining that identifies that you are competent in plan, configure and support advanced enterprise switching.
Task 1: How do you plan, configure and test a VLAN-based solution given in the case study scenario?
1.1 Determine network resources required for implementing a VLAN-based solution for a given network design and requirements?
1.2 How can you create an implementation plan and a verification plan for the VLAN-based network solution?
1.3 How can you configure and verify switch-to-switch connectivity, loop prevention and access ports for the VLAN-based solution using network tools such as switched port analyser?
1.4 How can you document results of the VLAN implementation and verification plans?
Task 2: How do you plan, configure and test a secure layer 2 network solutions and a switch-based layer 3 services solution
2.1 Determine network resources required for implementing a secure layer 2 network solutions and a switch-based layer 3 solution against vulnerabilities with organisational security policies?
2.2 How can you configure and verify a private VLAN, and features for port security and general switch security for the layer 2 network solution using network tools?
2.3 How can you configure and verify routing interfaces and layer 3 securities for the switch-based layer 3 network solution using network tools?
2.4 How can you document results of security implementation and verification plans for each of the layer 2 and the layer 3 network solution?
Task 3: How you can prepare Acme’s infrastructure to support advanced services given below
3.1 Wireless extension of a layer 2 solution.
3.2 Support solution for a voice over internet protocol (VoIP) and a video application.
Task 4: Plan, configure and test high-availability networks using multilayer switches solution
4.1 Determine network resources needed for implementing high-availability solution for a given network design and requirements?
4.2 How can you configure, verify and manage first hop redundancy protocols (FHRP), give examples?
4.3 How can you implement switch supervisor redundancy and use network tools to verify the highavailability solution?
4.4 How can you document results of high-availability implementation and verification plans?