Junior Networks - JNCIS - Network Security Infrastructure - Spyon Technologies - IT Assessment Answer

Assessment Task:

Junior Networks IT Assessment Answer

Assessment questions and tasks
Your task, as a group of 2 or 3 people, is to redesign the network security infrastructure for Spyon Technologies so that it meets the business requirements for the organisation, and to write a detailed proposal which you will submit to Spyon Technologies for consideration.

To complete this task, you will submit a final design proposal to Spyon Technologies which will include:

 a detailed list of business requirements that must be met by the network security design

 a complete and detailed discussion of the network security design proposal. This must include complete logical diagrams of the redesigned network and a
discussion of the techniques and technologies used, e.g. Clustering, zones, policies, authentication, encryption, and VPN 

 details of how the network security design will meet all the business requirements You will also need to:

•  Prepare implementation plans
•  Document the network design and present the documentation to the appropriate person for approval
•  Present the design in a clear and logical fashion
•  Provide advice to the client on reasons for your design choice.

 

Question 1
a. Would you describe Spyon Technologies security requirements as high, medium, or low? Why?

b. What types of security measures would you use to address each of the security requirements listed?

 

Question 2
Spyon Technologies has adopted the following risk evaluation criteria using a qualitative risk assessment methodology. In order to calculate the risk level for each risk that is to be examined, it is necessary to calculate the impact of the threat occurring and the likelihood (or probability) of the threat occurring.

 

Question 3
Using your list of threats, create a table that lists the defences for each threat Example format:

 

Question 4
Design the firewall configuration. Ref: How to Design a Secure DMZ Your design should include the following:

1.The name of each security zone you will create

2.The inter zone policy objectives including

a.Traffic allowed into the zone

b.Traffic allowed between the zones

c.Other security measures to be implemented in the policy

3.Method of securing traffic from site to site

4.Method of securing traffic to and from the public internet

 

Question 5
Write the Juniper SRX configuration required to implement all the functionality described in your answer above. You may refer to the SRX lab configurations. You will need to provide your IP addressing scheme as a separate table.

 

Question 6
Design failover redundancy for the firewall so that a stateful failover of processes and services will occur in the event of system or hardware failure.   Provide a diagram of your design and a description of how failover will be achieved in the event of a failure.

 

Question 7
Provide a typical failover redundancy configuration for a Juniper SRX firewall. Ref: FTP

 

Question 8
Provide a typical site to site VPN configuration for a Juniper SRX firewall. Ref: FTP

 

Question 9
Is the network traffic traversing the IPSEC VPN encrypted using  symmetric or asymmetric encryption? Explain the difference between these 2 methods. Compare 3 algorithms that could be

 

Question 10
You want to encrypt email communications between all company staff and business associates.  What program could you use to do this? What are the advantages of this program? What type of encryption would be used? What encryption algorithms could be used? 

 

Question 11
You want to ensure the integrity of email and other digital communication.  How can this be achieved? What algorithms could be used? 

 

Question 12
What authentication processes could you use to verify the identity of the person from who you are receiving email and other digital communication and to verify your identity to people you are sending communications to?  What algorithms could be used? 

 

Question 13
Evaluate the following providers of digital certificates and create a comparison table.  The table should compare the cost and advantages of the certificate services offered by each.
 Thawte

•  Go Daddy
•  Comodo
•  GlobalSign
•  GeoTrust
•  Symantic

 

Question 14 Provide a brief summary of Kerberos and NTLM Authentication. Describe the benefits of Kerberos.

 

Question 15 Provide a brief summary of Biometrics for Authentication. Describe the benefits of using Biometrics for Authentication. List 3 devices you could use to provide Biometric Authentication? 

 

Question 16 Explain the concept of digital certificates and how they work including: The relationship between user certificates and root certificates and the function of root
certificates

•  The role of Certificate Authorities
•  The role of Registration Authorities
•  The function of a digital certificate repository

 

Question 17 What are the factors that contribute to encryption strength?

 

Question 18 You are reviewing help desk records and discover that emails to some recipients are not able to be encrypted while emails to other recipients are. What is the cause of this and how could it be resolved?

 

Question 19 Explain what a replay attack is and describe 2 methods of protection.

 

Question 20 Describe 5 security threats that can be caused by issues within the organisation.

 

Question 21 Explain the difference between WEP, WPA and WPA2.

 

Question 22 Explain authentication, authorization, and accounting (AAA). Your explanation should include the functions of a RADIUS server and it role in the resource accounting process.

 

Question 23 Describe the function and operation both IPSEC and MPLS VPN’s.  Compare these 2 technologies in terms of their ability to provide QoS, guaranteed bandwidth, and changing security requirements like the need for secure voice or video.

 

Question 24 Describe and compare CHAP and PAP authentication protocols.

 

Question 25 Write your proposal to Spyon Technologies.

 

This IT Assessment has been solved by our IT experts at My Uni Paper. Our Assignment Writing Experts are efficient to provide a fresh solution to this question. We are serving more than 10000+ Students in Australia, UK & US by helping them to score HD in their academics. Our experts are well trained to follow all marking rubrics & referencing style.

Be it a used or new solution, the quality of the work submitted by our assignment experts remains unhampered. You may continue to expect the same or even better quality with the used and new assignment solution files respectively. There’s one thing to be noticed that you could choose one between the two and acquire an HD either way. You could choose a new assignment solution file to get yourself an exclusive, plagiarism (with free Turnitin file), expert quality assignment or order an old solution file that was considered worthy of the highest distinction.