Question

ASSESSMENT 1 - Project You are working as an IT consultant for Nubex Pty Ltd. The Company has assigned you to develop the New Network infrastructure for New Branch of Harbour College located in York Street. New Branch of Harbour College will have 150 Users including Students, Staff and Trainers and runs different courses such as, Diploma of Accounting, Diploma of Leadership and Management, Diploma of IT (networking), Cert IV of IT (networking) and many more. You are to arrange an appointment with your client and identify their requirements. Students are to ask appropriate questions and utilise open-ended questioning techniques to identify the business requirements relating to the network setup and administrative requirements. You must lead the conversation, as your client may only answer the questions you ask. Remember, you are the networking professional, not the client. Once you know what your client wants to achieve, you are to research ICT Networking options for them, and develop A robust ICT Networking Architecture report Arrange an appointment with client by email to discuss about their IT requirement Identify business specifications & business requirements Identify clients' business Problem, Opportunities and objectives o Draw a detailed logical and physical network diagram o Identify appropriate Operating system (Server and Client Computer) List of server roles that will be relevant with business requirement List of required software and hardware to suit business requirements A proposal that details the networks impact on the business performance evaluates and comments on predicted performance considers business growth capacities o o . Focu MacBook Pro

i need answers to all of them. please solve as many as u can

the questions need to bw answered on the basis of the paragraph on the top. I need answers to the first 8 questions

Answer 1

Ans 1> A robust ICT architecture report :-

Purpose

This policy describes how entities can safeguard information and communication technology (ICT) systems to support the secure and continuous delivery of government business. Secure ICT systems protect the integrity (and facilitate the availability) of the information that entities process, store and communicates.

Requirements

Core requirement

Each entity must have in place security measures during all stages of ICT systems development. This includes certifying and accrediting ICT systems in accordance with the Information Security Manual when implemented into the operational environment.

Security measures during ICT system development or improvement

When establishing new ICT systems or implementing improvements to current ICT systems, it is more cost effective to address security issues during conception, architecture and design, than retrofitting security protections at a later time.

As such, Requirement 1 mandates that entities must address security in the early phases of ICT system development. Security issues that may warrant consideration during system development; ongoing consideration of these security matters throughout the ICT system's life cycle is important to maintaining information security.

ICT accreditation framework

The PSPF requires entities to certify that an appropriate level of security is being applied to their ICT systems and that residual risks have been accepted by a relevant accreditation authority. This will provide the confidence that ICT products meet security needs, address known vulnerabilities and remain secure. An impartial (and in some cases, independent) evaluation or security assessment can be a valuable tool in informing certification and accreditation decisions.

Key elements of an indicative accreditation framework are:

Accreditation is not permanent. Recertification and reaccreditation may be triggered by:

Figure 1 outlines an indicative process for awarding ICT system certification and accreditation. Table 2 identifies who can make decisions relating to certification and accreditation for different types of ICT systems.

Figure 1 Indicative process for system certification and accreditation

Certification Authority Accreditation Authority Assessor Stage 1 Security Assessment/Audit: Audits system to identify security deficiencies System Owner Rectifies or mitigates security deficiencies identified by the Assessor Operates system Stage 2 Security Assessment/Audit: Assesses identified deficiencies have been addressed and considers the effectiveness of security protections Certification: Certifies security measures have been implemented and are operating effectively. Accreditation: Recognises and accepts the residual security risk to a system and the information it processes, stores or communicates. Grants approval for the system to operate. Based on: findings of Security Assessment/Audit • consideration of residual risk Seek re-accreditation: Based on: • time changes to business impacts, system architecture, users etc • accreditation conditions Based on: • findings of certification • consideration of residual risks, and other factors

ICT system monitoring

Monitoring ICT systems through event logging improves the chances that malicious behaviour will be detected. Conducting regular audits of event logs will help detect, attribute and respond to any security issues. Requirement 3 mandates that entities ensure their ICT systems (including software) incorporate processes for audit trails and activity logging, to ensure the accuracy and integrity of data captured or held.

Secure internet gateways

Secure Internet Gateways (SIGs) play a vital role in securing ICT systems and are one element of a layered defensive strategy. By adopting a set of common SIG services, government benefits from a baseline level of protection at the network perimeter. A number of high-risk threats to ICT systems (eg distributed denial of service, botnets, malware, web application attacks, web-based attacks) are amenable to efficient mitigation through appropriately configured SIGs. At the same time, entities require the flexibility to source additional security services in a manner that best suits their operational needs and risk environment.