Reference no: EM131660995

Assignment

You have been hired as part of the network security team at UMUC. After completing orientation and training, your manager calls you into a meeting to discuss your first project.

The university has completed the implementation of the leased building in Adelphi, Maryland. The university realizes it needs to secure the faculty, students, and visitors network and data. With your background and skills, the university is looking to you for guidance. In addition to helping the university secure its network, you are required to obtain your CompTIA Security+ certification within 60-days of being hired.

As you will recall, the university leased building in Adelphi, Maryland was designed and implemented via the following layout:

You've been asked to perform network security analysis and planning, secure the boundary devices, hosts, and software; and secure the data at rest and in transit. Your deliverable should explain the requirement, propose a solution, and justify the solution. You should make use of the TestOut LabSim material to create the task, and study for CompTIA Security+ certification. You should also make use of other sources as required. It is important that your deliverable explain the technical issues in layman's terms. Before you begin, make sure to review the Network Security Proposal (Parts 1-3).

In this learning demonstration, you will use TestOut Security Pro to help you understand how to identify and assess network infrastructure and pass the CompTIA Security+ certification. In order to identify your strengths and weaknesses, you will first complete the practice exam that will prepare you for the certification. The learning materials within TestOut LabSim will help you understand the types of vulnerabilities within a network and how to address them. As you step through each set of activities, you will submit a Vulnerability Assessment and Recommendation Document in three parts. Use the results of the certification practice exam you took at the beginning of the class to help guide you on which areas within LabSim you should pay closer attention. You must complete all online labs in TestOut LabSim; these are the activities with the computer mouse icon. Some of the other areas in TestOut LabSim are optional. You can complete any or all of those if you feel you need to learn more about the topics.

There are nine steps in this project that lead you through each deliverable. Begin with Step 1, obtaining access to TestOut Security Pro and enrolling in LabSim, and then continue with Step 2, taking the practice exam.

Analysis and Planning

In this section, students will address each of the following:

* Define the vulnerability assessment requirement, propose a solution, and justify the solution.

* Students should review the text and example provided but do not include it with their submission. Delete the text and include you own.

* Define the security policy requirement, propose a solution, and justify the solution.

* Students should be specific when defining the overall security outlook for the organization.

* Define the risk management requirement, propose a solution, and justify the solution.

* Students should describe the process, its value to the organization, and use proper terminology.

* Define the business continuity plan requirements, propose a solution, and justify the solution.

* Student should describe the activity in detail, and include each of the plan types.

* Define the access controls requirement, propose a solution, and justify the solution.

* Students should be specific with the type of access control model they select.

Securing Boundary Devices, Hosts, and Software

In this section, students will address each of the following.

Define the physical security requirements, propose a solution, and justify the solution.

At a minimum, students should discuss the three main factors of prevention, detection, and recovery; and include the appropriate control measure.

* Define the physical security requirements, propose a solution, and justify the solution.

* At a minimum, students should discuss the three main factors of prevention, detection, and recovery; and include the appropriate control measure.

* Define the mobile device security requirements, propose a solution, and justify the solution.

* Students should include smartphones, laptops, tablets, or any other mobile device that may be introduced in the UMUC environment. Students should also include the considerations and their implications.

* Define the perimeter defense requirements, propose a solution, and justify the solution.

* Students should consider the different types of attacks, security appliances, and the network configuration to implement.

* Define the network defense requirements, propose a solution, and justify the solution.

* Students should discuss common network devices, their vulnerabilities, and propose defensive solutions.

* Define the host defense requirements, propose a solution, and justify the solution.

* Students should the types of attacks hosts are susceptible to, and proposal defensive solutions.

Securing Data at rest and in transit

In this section, students will address each of the following.

* Define the public key infrastructure (PKI) requirements, propose a solution, and justify the solution.

* Students should be specific when discussing the implementation and configuration required for the PKI solution.

* Define the secure protocol implementation requirements, propose a solution, and justify the solution.

* Students should consider data as it is in transit and discuss the numerous scenarios and solutions to protect it.

* Define the file encryption requirements, propose a solution, and justify the solution.

* Students should consider data at rest and discuss the numerous scenarios and solutions to protect it.

* Define the file hashing implementation, propose a solution, and justify the solution.

* Students should consider where hashing should be implemented in the network design and explain what it provides in each instance.

* Define the backup and restoration implementation, propose a solution, and justify the solution.

* Students should explain the process, where it is applicable in the UMUC network scenario, and how it will be achieved (process, hardware, and frequency).