Solved by verified expert :ASSESSMENT RECORD
/ FEEDBACK SHEET
Course:
ICA60211 Advanced Diploma of IT – Network Security
Name: Student
ID:
Unit
Name and Code: ICANWK604A Plan and configure advanced internetwork switching
solutions
Assessment Task
Number and Title: Case study and short answer questions
Date
Due: Trainer’s
Name:
All assessments must be in a neat and
readable format.
Students are required to
retain a duplicate of any assignment submitted, both written & disk copy.
Please refer to the Student Handbook for
the Assessment Policy.
Plagiarism
is an academic misconduct and is unacceptable to Pacific College of Technology.
I
certify that the work submitted is my own. I have acknowledged material taken
from websites, textbooks and articles.
Student’s
Signature:
Date Submitted:
To be completed
by Trainer
Competent
Not yet
competent
to be reassessed
Feedback
Signed (Trainer/Assessor)
Date:
Feedback
provided by the trainer
Date:
Please retain
this as proof of submission
Unit name:Plan
and configure advanced internetwork switching solutions
Assignment No:Case
Study
Received By:
Date:
DS-AV-10/13
CS– ICANWK604A V1.0
RTO
Provider Code: 91151
CRICOS
Provider Code: 02668F
Page
1OF4
Course
: ICA60211
Advanced Diploma of Network Security
Unit code and
name
: ICANWK604A
Plan and configure advanced internetwork switching
solutions
Trainer/Assessor
:
Assessment item
: Case Study
and short answer questions
Due date
: Week 8
(Extension upon trainer’s approval only)
Context and
purpose of the assessment:
This
assessment will assess your skills and knowledge in the area of ‘Plan and
configure advanced internetwork switching solutions’. This
assessment activity deals with the followingelements of performance and
critical aspects of evidence:
Task
Element
Performance
Criteria
1-4
1,
2, 3, 4
1.1, 1.2, 1.3,
1.4, 2.1, 2.2, 2.3, 2.4, 2.5, 3.1, 3.2, 4.1, 4.2, 4.3, 4.4, 4.5
oThe
assessment tasks for the unit assume that you will work in the Information
Technologyindustry. Case study and
short answer questions used in this assessment reflect a workplace scenario.
oThe
student must have access to a computer, printer and Microsoft office suite
applications fordoing the assessment for
this unit.
oIf
you are not sure about any aspect of this assessment, please ask for
clarification from yourassessor.
If the assessment is not satisfactory, the trainer will allow one more attempt
to the assessment item.
oThe
responses to assessment questions should be in your own words and examples fromworkplace
should be used wherever possible.
DS-AV-10/13
CS– ICANWK604A V1.0
RTO
Provider Code: 91151
CRICOS
Provider Code: 02668F Page 2OF4
Case
Study – Securing the Network with VLANs
Acme
Financial Systems (name changed), wants to improve the overall security
of their network. Our role was to determine an area of the network that was at
significant risk, evaluate potential solutions and recommend one, and help
implement the solution.
Acme’s
perimeter defenses were pretty sound. Internally, however, we determined their
“wide-open” network left them vulnerable to well-known threats. We wanted to
deploy an internal firewall to control the flow of traffic between different
zones on the network. After evaluating several options, we decided implementing
VLANs and using a router with access lists to control the traffic flow was our
solution of choice. While there is still work to do, as is the case with any
security solution, we were able to improve the overall security of their
network.
The
details of case study can be found in Pacific College Management System
(PCMS) resources.
Assessment
Activity: – Complete the following four (4) tasks in your own words. You are
required to prepare and submit each question and answer in detail, explaining
that identifies that you are competent in plan, configure and support advanced
enterprise switching.
Task
1: How do you plan, configure and test a VLAN-based solution given in the case
study
scenario?
1.1
Determine network
resources required for implementing a VLAN-based solution for a given network
design and requirements?
1.2
How can you create an
implementation plan and a verification plan for the VLAN-based network
solution?
1.3
How can you configure
and verify switch-to-switch connectivity, loop prevention and access ports for
the VLAN-based solution using network tools such as switched port
analyser?
1.4 How
can you document results of the VLAN implementation and verification plans?
DS-AV-10/13
CS– ICANWK604A V1.0
RTO
Provider Code: 91151
CRICOS
Provider Code: 02668F Page 3OF4
Task
2: How do you plan, configure and test a secure layer 2 network solutions and a
switch-based
layer 3 services solution
2.1
Determine network
resources required for implementing a secure layer 2 network solutions and a
switch-based layer 3 solution against vulnerabilities with organisational
security policies?
2.2
How can you configure
and verify a private VLAN, and features for port security and general switch
security for the layer 2 network solution using network tools?
2.3
How can you configure
and verify routing interfaces and layer 3 securities for the switch-based layer
3 network solution using network tools?
2.4 How
can you document results of security implementation and verification plans for
each of the
layer 2 and the
layer 3 network solution?
Task
3: How you can prepare Acme’s infrastructure to support advanced services given
below
3.1 Wireless
extension of a layer 2 solution.
3.2 Support
solution for a voice over internet protocol (VoIP) and a video application.
Task 4:
Plan, configure and
test high-availability networks
using multilayer switches
solution
4.1
Determine network
resources needed for implementing high-availability solution for a given
network design and requirements?
4.2
How can you configure,
verify and manage first hop redundancy protocols (FHRP), give examples?
4.3
How can you implement
switch supervisor redundancy and use network tools to verify the
high-availability solution?
4.4 How
can you document results of high-availability implementation and verification
plans?
