Limited Offer Get 25% off — use code BESTW25
No AI No Plagiarism On-Time Delivery Free Revisions
Claim Now

ICTNWK509 – Design and implement a security

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 1 of 67
Unit Assessment Pack (UAP) – Cover Sheet
Student and Trainer/Assessor Details

Student ID
Student name
Contact number
Email address
Trainer/Assessor name .

Course and Unit Details

Course code
Course name
Unit code ICTNWK509
Unit name Design and implement a security perimeter for ICT networks

Assessment Submission Method

☐ By hand to trainer/assessor ☐ By email to
trainer/assessor
☐ Online submission via Learning
Management System (LMS)
☐ By Australia Post to RTO ☐ Any other method
_________________________________________________
(Please mention here)

Student Declaration

 I certify that the work submitted for this assessment pack is my own. I have clearly
referenced any sources used in my submission. I understand that a false declaration is a
form of malpractice;
 I have kept a copy of this assessment pack and all relevant notes, attachments, and
reference material that I used in the production of the assessment pack;
 For the purposes of assessment, I give the trainer/assessor of this assessment the
permission to:
o Reproduce this assessment and provide a copy to another member of staff; and
o Take steps to authenticate the assessment, including communicating a copy of
this assessment to a checking service (which may retain a copy of the assessment
on its database for future plagiarism checking).
Student signature: ________________________________
Date: ____/_____/______________

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 2 of 67
Assessment Plan
To demonstrate competence in this unit, you must be assessed as satisfactory in each of the
following assessment tasks.

Evidence recorded Evidence Type/ Method of assessment Sufficient evidence
recorded/Outcome
Unit Assessment Task 1 Unit Knowledge Test (UKT) S / NS (First Attempt)
S / NS (Second Attempt)
Unit Assessment Task 2 Unit Project (UP) S / NS (First Attempt)
S / NS (Second Attempt)
Unit Assessment Task 3 Unit Project (UP) S / NS (First Attempt)
S / NS (Second Attempt)
Final result C/NYC Date assessed
Trainer/Assessor
Signature

Assessment Conditions

Unit purpose/application

This unit describes the skills and knowledge required to build a high performance, high security,
failure resistant security perimeter, for an enterprise information and communications technology
(ICT) network.
It applies to individuals with excellent ICT expertise who are working as middle managers, including
information security managers, network engineers, network technicians and security analysts.
No licensing, legislative or certification requirements apply to this unit at the time of publication.

What the student can expect to learn by studying this unit of competency

• Plan and design firewall solution
• Configure perimeter to secure network
• Plan, design and configure network devices to provide secure fallover and redundancy
• Plan, design and configure a VPN solution
• Test and verify design performance

Training and assessment resources required for this unit of competency

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 3 of 67

The student will have access to the following:
Learner guide


PowerPoint presentation
Unit Assessment Pack (UAP)
Access to other learning materials such as textbooks
The resources required for these assessment tasks also included:
Site or prototype where perimeter security may be implemented and managed

 Perimeter devices
 Organisational security requirements.
Your trainer/assessor will confirm assessment submission details for each assessment task.

Academic integrity, plagiarism and collusion

Academic Integrity
Academic Integrity is about the honest presentation of your academic work. It means acknowledging
the work of others while developing your own insights, knowledge and ideas.
As a student, you are required to:





undertake studies and research responsibly and with honesty and integrity
ensure that academic work is in no way falsified
seek permission to use the work of others, where required
acknowledge the work of others appropriately
take reasonable steps to ensure other students cannot copy or misuse your work.

Plagiarism
Plagiarism means to take and use another person’s ideas and or manner of expressing them and to
pass them off as your own by failing to give appropriate acknowledgement. This includes material
sourced from the internet, RTO staff, other students, and from published and unpublished work.
Plagiarism occurs when you fail to acknowledge that the ideas or work of others are being used, which
includes:




Paraphrasing and presenting work or ideas without a reference
Copying work either in whole or in part
Presenting designs, codes or images as your own work
Using phrases and passages verbatim without quotation marks or referencing the author or
web page
Reproducing lecture notes without proper acknowledgement.

Collusion
Collusion means unauthorised collaboration on assessable work (written, oral or practical) with other
people. This occurs when a student presents group work as their own or as the work of someone else.
Collusion may be with another RTO student or with individuals or students external to the RTO. This
applies to work assessed by any educational and training body in Australia or overseas.
Collusion occurs when you work without the authorisation of the teaching staff to:
 Work with one or more people to prepare and produce work
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 4 of 67




Allow others to copy your work or share your answer to an assessment task
Allow someone else to write or edit your work (without rto approval)
Write or edit work for another student
Offer to complete work or seek payment for completing academic work for other students.

Both collusion and plagiarism can occur in group work. For examples of plagiarism, collusion and
academic misconduct in group work please refer to the RTO’s policy on Academic integrity, plagiarism
and collusion.
Plagiarism and collusion constitute cheating. Disciplinary action will be taken against students who
engage in plagiarism and collusion as outlined in RTO’s policy.
Proven involvement in plagiarism or collusion may be recorded on students’ academic file and could
lead to disciplinary action.

Other Important unit specific Information

N/A

Unit outcome

 This unit is not graded and the student must complete and submit all requirements for the
assessment task for this cluster or unit of competency to be deemed competent.
 Students will receive a ‘satisfactorily completed’ (S) or ‘not yet satisfactorily completed (NS)
result for each individual unit assessment task (UAT).
 Final unit result will be recorded as competency achieved/competent (C) or competency not
yet achieved/not yet competent (NYC).

Prerequisite/s

Nil

Co-requisite/s

Nil
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 5 of 67

Foundation Skills

The Foundation Skills describe those required skills (learning, oral communication, reading, writing,
numeracy, digital technology and employment skills) that are essential to performance. Foundation skills
essential to performance are explicit in the performance criteria of this unit of competency.

Relevant Legislation

 Australian Human Rights Commission Act 1986
 Age Discrimination Act 2004
 Disability Discrimination Act 1992
 Racial Discrimination Act 1975
 Sex Discrimination Act 1984
 The Privacy Act 1988 (Privacy Act) and Australian Privacy Principles (APPs)
 Occupational Health and Safety Act 2004
 Work Health and Safety Act 2011

Principles of assessment and rules of evidence

All assessment tasks will ensure that the principles of assessment and rules of evidence are adhered
to.
The principles of assessment are that assessment must be valid, fair, flexible, reliable and consistent.
The rules of evidence state that evidence must be sufficient, valid, current and authentic.

AQF Level

AQF levels and the AQF levels criteria are an indication of the relative complexity and/or depth of
achievement and the autonomy required to demonstrate that achievement.
All assessment tasks must ensure compliance with the requirements of AQF level and the AQF level
criteria. For more information, please visit http://www.aqf.edu.au/

Further Information

For further information about this unit go to https://training.gov.au/Training/Details/ICTNWK509
Additional Information
• This information will be managed by the provisions of the Privacy Act and the Freedom of
Information Act.)
• Students are required to satisfactorily complete and submit all assessment tasks that
contribute to the assessment for a unit.
• Students will be provided with one more attempt to complete this Unit assessment pack
(UAP) if trainer/assessor deems them not satisfactorily completed (NS) in any Unit
assessment task (UAT).
• Unit Pre-Assessment Checklist (UPAC) will be reviewed by the trainer/assessor to ensure
the student is ready for the assessment.
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 6 of 67
• Feedback regarding this Unit Assessment Pack (UAP) can be emailed to the compliance and
quality assurance department/administration department in your RTO for continuously
improving our assessment and student resources.
Feedback to student
Feedback on students’ assessment performance is a vital element in their learning. Its purpose is to
justify to students how their competency was assessed, as well as to identify and reward specific
qualities in their work, to recommend aspects needing improvement, and to guide students on what
steps to take.
Feedback defines for students what their trainer/assessor thinks is important for a topic or a subject.
At its best, feedback should:
• Be provided for each Unit Assessment Task (UAT)
• Guide students to adapt and adjust their learning strategies
• Guide trainers/assessors to adapt and adjust teaching to accommodate students’ learning
needs
• Be a pivotal feature of learning and assessment design, not an add-on ritual
• Focus on course and unit learning outcomes
• Guide students to become independent and self-reflective learners and their own critics
• Acknowledge the developmental nature of learning.
If students have not received proper feedback, they must speak to compliance and quality assurance
department/administration department in the RTO/person responsible for looking after the quality
and compliance services of the RTO.
For more information, please refer to RTO Student Handbook.
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 7 of 67
Unit Pre-Assessment Checklist (UPAC)
UAT 1 – Unit Knowledge Test (UKT)
Purpose of the checklist
The pre-assessment checklist helps students determine if they are ready for assessment. The
trainer/assessor must review the checklist with the student before the student attempts the
assessment task. If any items of the checklist are incomplete or not clear to the student, the
trainer/assessor must provide relevant information to the student to ensure they understand the
requirements of the assessment task. The student must ensure they are ready for the assessment task
before undertaking it.
Section 1: Information for Students

Please make sure you have completed the necessary prior learning before attempting this
assessment.
Please make sure your trainer/assessor clearly explained the assessment process and tasks to
be completed.
Please make sure you understand what evidence is required to be collected and how.
Please make sure you know your rights and the Complaints and Appeal process.
Please make sure you discuss any special needs or reasonable adjustments to be considered
during the assessment (refer to the Reasonable Adjustments Strategy Matrix and negotiate
these with your trainer/assessor).
Please make sure that you have access to a computer and the internet (if you prefer to type
the answers).
Please ensure that you have all the required resources needed to complete this Unit
Assessment Task (UAT).
Due date of this assessment task is according to your timetable.
In exceptional (compelling and compassionate) circumstances, an extension to submit an
assessment can be granted by the trainer/assessor.
Evidence of the compelling and compassionate circumstances must be provided together with
your request for an extension to submit your assessment work.
Request for an extension to submit your assessment work must be made before the due date
of this assessment task.



Section 2: Reasonable adjustments

Students with carer responsibilities, cultural or religious obligations, English as an additional
language, disability etc. can request for reasonable adjustments.
Please note, academic standards of the unit/course will not be lowered to accommodate the
needs of any student, but there is a requirement to be flexible about the way in which it is
delivered or assessed.
The Disability Standards for Education requires institutions to take reasonable steps to enable

the student with a disability to participate in education on the same basis as a student without
a disability.

Trainer/Assessor must complete the section below “Reasonable Adjustment Strategies
Matrix” to ensure the explanation and correct strategy have been recorded and implemented.
Trainer/Assessor must notify the administration/compliance and quality assurance
department for any reasonable adjustments made.
All evidence and supplementary documentation must be submitted with the assessment pack
to the administration/compliance and quality assurance department.

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 8 of 67

Reasonable Adjustment Strategies Matrix (Trainer/Assessor to complete)
Category Possible Issue Reasonable Adjustment Strategy
(select as applicable)
 LLN  Speaking
 Reading
 Writing
 Confidence
 Verbal assessment
 Presentations
 Demonstration of a skill
 Use of diagrams
 Use of supporting documents such as wordlists
 Non
English
Speaking
Background
 Speaking
 Reading
 Writing
 Cultural
background
 Confidence
 Discuss with the student and supervisor (if applicable)
whether language, literacy and numeracy are likely to
impact on the assessment process
 Use methods that do not require a higher level of
language or literacy than is required to perform the job role
 Use short sentences that do not contain large amounts
of information
 Clarify information by rephrasing, confirm understanding
 Read any printed information to the student
 Use graphics, pictures and colour coding instead of, or to
support, text
 Offer to write down, or have someone else write, oral
responses given by the student
 Ensure that the time available to complete the
assessment, while meeting enterprise requirements, takes
account of the student’s needs

Indigenous
 Knowledge and
understanding
 Flexibility
 Services
 Inappropriate
training and
assessment
 Culturally appropriate training
 Explore understanding of concepts and practical
application through oral assessment
 Flexible delivery
 Using group rather than individual assessments
 Assessment through completion of practical tasks in the
field after demonstration of skills and knowledge.
 Age  Educational
background
 Limited study
skills
 Make sure font size is not too small
 Trainer/Assessor should refer to the
student’s experience
 Ensure that the time available to complete the
assessment takes account of the student’s needs
 Provision of information or course materials in accessible
format.
 Changes in teaching practices, e.g. wearing an FM
microphone to enable a student to hear lectures
 Supply of specialised equipment or services, e.g. a note
taker for a student who cannot write
 Changes in lecture schedules and arrangements, e.g.
relocating classes to an accessible venue

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 9 of 67

 Changes to course design, e.g. substituting an
assessment task
 Modifications to physical environment, e.g. installing
lever taps, building ramps, installing a lift

Educational
background
 Reading
 Writing
 Numeracy
 Limited study
skills and/or
learning strategies
 Discuss with the Student previous learning experience
 Ensure learning and assessment methods meet the
student’s individual need
 Disability  Speaking
 Reading
 Writing
 Numeracy
 Limited study
skills and/or
learning strategies
 Identify the issues
 Create a climate of support
 Ensure access to support that the student has agreed to
 Appropriately structure the assessment
 Provide information or course materials in accessible
format, e.g. a textbook in braille
 Changes in teaching practices, e.g. wearing an FM
microphone to enable a student to hear lectures
 Supply of specialised equipment or services, e.g. a note
taker for a student who cannot write
 Changes in lecture schedules and arrangements, e.g.
relocating classes to an accessible venue
 Changes to course design, e.g. substituting an
assessment task
 Modifications to physical environment, e.g. installing
lever taps, building ramps, installing a lift
Explanation of reasonable adjustments strategy used (If required)

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 10 of 67
Unit Assessment Task (UAT)
Assessment Task 1 – Unit Knowledge Test (UKT)
Assessment type:
 Written Questions
Assessment task description:

This is the first (1) unit assessment task you have to successfully complete to be deemed
competent in this unit of competency.
The Unit Knowledge Test is comprised of nineteen (19) written questions
You must respond to all questions and submit them to your Trainer/Assessor.
You must answer all questions to the required level, e.g. provide the number of points, to be
deemed satisfactory in this task
You will receive your feedback within two weeks – you will be notified by your Trainer/Assessor
when results are available.


Applicable conditions:

All knowledge tests are untimed and are conducted as open book tests (this means you are
able to refer to your textbook during the test).
You must read and respond to all questions.
You may handwrite/use computers to answer the questions.
You must complete the task independently.
No marks or grades are allocated for this assessment task. The outcome of the task will be
Satisfactory or Not Satisfactory.
As you complete this assessment task you are predominately demonstrating your written skills
and knowledge to your trainer/assessor.
The trainer/assessor may ask you relevant questions on this assessment task to ensure that
this is your own work.



Resubmissions and reattempts:

Where a student’s answers are deemed not satisfactory after the first attempt, a resubmission
attempt will be allowed.
You must speak to your Trainer/Assessor if you have any difficulty in completing this task and
require reasonable adjustments (e.g. can be given as an oral assessment)
For more information, please refer to your RTO Student Handbook.

Location:

This assessment task may be completed in a learning management system (i.e. Moodle) or
independent learning environment.
Your trainer/assessor will provide you further information regarding the location for
completing this assessment task.

Instructions for answering written questions:
 Complete a written assessment consisting of a series of questions.
 You will be required to correctly answer all the questions.
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 11 of 67

Do not start answering questions without understanding what is required from you. Read the
questions carefully and critically analyse them for a few seconds, this will help you to identify
what is really needed.
Your answers must demonstrate an understanding and application of relevant concepts,
critical thinking, and good writing skills.
Be concise to the point and write answers according to the given word-limit to each question
and do not provide irrelevant information. Be careful, quantity is not quality.
Be careful to use non-discriminatory language. The language used should not devalue,

demean, or exclude individuals or groups on the basis of attributes such as gender, disability,
culture, race, religion, sexual preference or age. Gender inclusive language should be used.

When you quote, paraphrase, summarise or copy information from the sources you are using
to write your answers/research your work, you must always acknowledge the source.

How your trainer/assessor will assess your work?




This assessment task requires the student to answer all the questions.
Answers must demonstrate the student’s understanding and knowledge of the unit.
If all assessment tasks are deemed Satisfactory (S), then the unit outcome is Competent (C).
If at least one of the assessment task is deemed Not Satisfactory (NS), then the unit outcome
is Not Yet Competent (NYC).
Once all assessment tasks allocated to this Unit of Competency have been undertaken,
trainer/assessor will complete an Assessment plan to record the unit outcome. The outcome
will be either Competent (C) or Not Yet Competent (NYC).
The “Assessment Plan” is available with the Unit Assessment Pack (UAP) – Cover Sheet.

Purpose of the assessment task:
 The purpose of this assessment task is to assess the students’ knowledge required for the
designing and implementation of a security perimeter for ICT networks.
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 12 of 67
Assessment Task 1 – Unit Knowledge Test (UKT)
Instructions:
 This is an individual assessment.
The purpose of this assessment task is to assess the students’ knowledge required to ensure secure
file encryption is selected, implemented and monitored on a computer network or local
environment.

To make full and satisfactory responses you should consult a range of learning resources,
other information such as handouts and textbooks, learners’ resources and slides.
All questions must be answered in order to gain competency for this assessment.
You may attach a separate sheet if required.
You must include the following particulars in the footer section of each page of the attached
sheets:


o Student ID or Student Name

o Unit ID or Unit Code
o Course ID or Course Code
o Trainer and assessor name

o Page numbers


You must staple the loose sheets together along with the cover page.
You must attach the loose sheets chronologically as per the page numbers.
Correction fluid and tape are not permitted. Please do any corrections by striking through
the incorrect words with one or two lines and rewriting the correct words.

Resources required to complete the assessment task:

Learner guide



PowerPoint presentation
Unit Assessment Pack (UAP)
Access to other learning materials such as textbooks
Access to a computer, the Internet and word-processing system such as MS Word.

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 13 of 67
Question 1: What are the five (5) latest network security issues? Write 30-60 words for each
network security threat.
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 14 of 67
Question 2: What is the importance of the network security policy for a networked organisation along
with the four (4) steps involved in network security policy? Write your answer in 150-200 words.
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 15 of 67
Question 3: Answer the following questions:
A. What do you mean by penetration testing techniques? Write your response in 50-100 words.
B. What is the importance of penetration testing in terms of network security? Write your
response in 50-100 words.
C. Explain in Network Auditing in 100-150 words.
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 16 of 67
Question 4: What are the capabilities of the following:
A. Software perimeter solution
B. Hardware Perimeter solution
Write your response in 200-250 words.
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 17 of 67
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 18 of 67
Question 5: Explain the reasons for using network logging analysis techniques in terms of
network security perimeter issue? Write 100-150 words for your answer.
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 19 of 67
Question 6: What do you mean by organisational network infrastructure keeping network
security perimeter in prospect? Write your response in 100-150 words.
Question 7: What are the five (5) network security technologies as per the perimeter design?
Write 30-50 words for each.
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 20 of 67
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 21 of 67

Question 8:
A. Firewall
What are the weaknesses of the following perimeter designs:

B. VPN
Write 50-100 words for each
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 22 of 67
Question 9: What are the six (6) best practices for deployment of firewalls as network security
perimeter device? Write your answer in 130-180 words.
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 23 of 67
Question 10: Summarise the configuration of the three legged firewall in simple words. Also use a
screenshot to explain the three legged firewall network.
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 24 of 67
Question 11: What are the four (4) best practices for firewall rules configuration including allow
access? Write 150-200 words for your response.
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 25 of 67
Question 12: What are the four (4) types of controls which firewalls provide as their advanced
function? Write your answer in 100-150 words.
Question 13: What are the reasons to back up of configuration of a firewall? Write 100-150 words
for your response.
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 26 of 67
Question 14: What are the eight (8) factors to consider while designing and configuring firewall
migration in order to continue the service in case of update or device failure? Write 20-40
words for each factor
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 27 of 67
Question 15: What are the steps involved for configuring site to site Virtual Private Networks
(VPNs)? Write your answer in 130-170 words.
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 28 of 67
Question 16: Answer the following questions:
A. What are the two (2) components required to configure remote access VPN? Write your answer
in 100-150 words.
B. What might be the reason for setup of VPN Tunnel? Write your response in 50-100 words.
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 29 of 67
Question 17: Answer the following questions:
A. What are the VPN connectivity issues?
B. List the steps involved in resolving VPN connectivity issues.
Write your response in 100-150 for the answers.
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 30 of 67
Question 18: Summarise the following test functionality for the following:
A. Basic VPN tests
B. Advanced VPN Tests
Write 100-150 words for each test.
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 31 of 67
Question 19: Answer the following questions:
A. What are the six (6) common network security breaches and their solution? Write your
response in 100-150 words.
B. What are the different steps involved in documenting the test results? Write your response in
50-100 words.
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 32 of 67
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 33 of 67
Unit Assessment Result Sheet (UARS)
Assessment Task 1 – Unit Knowledge Test (UKT)
Student and Trainer/Assessor Details

Unit code ICTNWK509
Unit name Design and implement a security perimeter for ICT networks
Outcome of Unit
Assessment Task (UAT)
First attempt:Outcome (please make sure to tick the correct checkbox):
Satisfactory (S) ☐ or Not Satisfactory (NS) ☐
Date: _______(day)/ _______(month)/ ____________(year)
Second attempt:Outcome (please make sure to tick the correct checkbox):
Satisfactory (S) ☐ or Not Satisfactory (NS) ☐
Date: _______(day)/ _______(month)/ ____________(year)
Feedback to Student First attempt:Second attempt:
Student Declaration  I declare that the answers I have provided are my own work.
Where I have accessed information from other sources, I have
provided references and or links to my sources.

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 34 of 67

 I have kept a copy of all relevant notes and reference material
that I used as part of my submission.
 I have provided references for all sources where the
information is not my own. I understand the consequences of
falsifying documentation and plagiarism. I understand how
the assessment is structured. I accept that all work I submit
must be verifiable as my own.
 I understand that if I disagree with the assessment outcome, I
can appeal the assessment process, and either re-submit
additional evidence undertake gap training and or have my
submission re-assessed.
 All appeal options have been explained to me.
Student Signature
Date
Trainer/Assessor Name
Trainer/Assessor
Declaration
I hold:
 Vocational competencies at least to the level being delivered
 Current relevant industry skills
 Current knowledge and skills in VET, and undertake
 Ongoing professional development in VET
I declare that I have conducted an assessment of this candidate’s
submission. The assessment tasks were deemed current, sufficient,
valid and reliable. I declare that I have conducted a fair, valid, reliable,
and flexible assessment. I have provided feedback to the above
named candidate.
Trainer/Assessor Signature
Date
Office Use Only Outcome of Assessment has been entered onto the Student
Management System on _________________ (insert date)
by (insert Name) __________________________________

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 35 of 67
Unit Pre-Assessment Checklist (UPAC)
UAT 2 – Unit Project (UP)
Purpose of the checklist
The pre-assessment checklist helps students determine if they are ready for assessment. The
trainer/assessor must review the checklist with the student before the student attempts the
assessment task. If any items of the checklist are incomplete or not clear to the student, the
trainer/assessor must provide relevant information to the student to ensure they understand the
requirements of the assessment task. The student must ensure they are ready for the assessment task
before undertaking it.
Section 1: Information for Students

Please make sure you have completed the necessary prior learning before attempting this
assessment.
Please make sure your trainer/assessor clearly explained the assessment process and tasks to
be completed.
Please make sure you understand what evidence is required to be collected and how.
Please make sure you know your rights and the Complaints and Appeal process.
Please make sure you discuss any special needs or reasonable adjustments to be considered
during the assessment (refer to the Reasonable Adjustments Strategy Matrix and negotiate
these with your trainer/assessor).
Please make sure that you have access to a computer and the internet (if you prefer to type
the answers).
Please ensure that you have all the required resources needed to complete this Unit
Assessment Task (UAT).
Due date of this assessment task is according to your timetable.
In exceptional (compelling and compassionate) circumstances, an extension to submit an
assessment can be granted by the trainer/assessor.
Evidence of the compelling and compassionate circumstances must be provided together with
your request for an extension to submit your assessment work.
Request for an extension to submit your assessment work must be made before the due date
of this assessment task.



Section 2: Reasonable adjustments

Students with carer responsibilities, cultural or religious obligations, English as an additional
language, disability etc. can request for reasonable adjustments.
Please note, academic standards of the unit/course will not be lowered to accommodate the
needs of any student, but there is a requirement to be flexible about the way in which it is
delivered or assessed.
The Disability Standards for Education requires institutions to take reasonable steps to enable

the student with a disability to participate in education on the same basis as a student without
a disability.

Trainer/Assessor must complete the section below “Reasonable Adjustment Strategies
Matrix” to ensure the explanation and correct strategy have been recorded and implemented.
Trainer/Assessor must notify the administration/compliance and quality assurance
department for any reasonable adjustments made.
All evidence and supplementary documentation must be submitted with the assessment pack
to the administration/compliance and quality assurance department.

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 36 of 67

Reasonable Adjustment Strategies Matrix (Trainer/Assessor to complete)
Category Possible Issue Reasonable Adjustment Strategy
(select as applicable)
 LLN  Speaking
 Reading
 Writing
 Confidence
 Verbal assessment
 Presentations
 Demonstration of a skill
 Use of diagrams
 Use of supporting documents such as wordlists
 Non
English
Speaking
Background
 Speaking
 Reading
 Writing
 Cultural
background
 Confidence
 Discuss with the student and supervisor (if applicable)
whether language, literacy and numeracy are likely to
impact on the assessment process
 Use methods that do not require a higher level of
language or literacy than is required to perform the job role
 Use short sentences that do not contain large amounts
of information
 Clarify information by rephrasing, confirm understanding
 Read any printed information to the student
 Use graphics, pictures and colour coding instead of, or to
support, text
 Offer to write down, or have someone else write, oral
responses given by the student
 Ensure that the time available to complete the
assessment, while meeting enterprise requirements, takes
account of the student’s needs

Indigenous
 Knowledge and
understanding
 Flexibility
 Services
 Inappropriate
training and
assessment
 Culturally appropriate training
 Explore understanding of concepts and practical
application through oral assessment
 Flexible delivery
 Using group rather than individual assessments
 Assessment through completion of practical tasks in the
field after demonstration of skills and knowledge.
 Age  Educational
background
 Limited study
skills
 Make sure font size is not too small
 Trainer/Assessor should refer to the
student’s experience
 Ensure that the time available to complete the
assessment takes account of the student’s needs
 Provision of information or course materials in accessible
format.
 Changes in teaching practices, e.g. wearing an FM
microphone to enable a student to hear lectures
 Supply of specialised equipment or services, e.g. a note
taker for a student who cannot write
 Changes in lecture schedules and arrangements, e.g.
relocating classes to an accessible venue

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 37 of 67

 Changes to course design, e.g. substituting an
assessment task
 Modifications to physical environment, e.g. installing
lever taps, building ramps, installing a lift

Educational
background
 Reading
 Writing
 Numeracy
 Limited study
skills and/or
learning strategies
 Discuss with the Student previous learning experience
 Ensure learning and assessment methods meet the
student’s individual need
 Disability  Speaking
 Reading
 Writing
 Numeracy
 Limited study
skills and/or
learning strategies
 Identify the issues
 Create a climate of support
 Ensure access to support that the student has agreed to
 Appropriately structure the assessment
 provision of information or course materials in accessible
format, e.g. a text book in braille
 Changes in teaching practices, e.g. wearing an FM
microphone to enable a student to hear lectures
 Supply of specialised equipment or services, e.g. a note
taker for a student who cannot write
 Changes in lecture schedules and arrangements, e.g.
relocating classes to an accessible venue
 Changes to course design, e.g. substituting an
assessment task
 Modifications to physical environment, e.g. installing
lever taps, building ramps, installing a lift
Explanation of reasonable adjustments strategy used (If required)

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 38 of 67
Unit Assessment Task (UAT)
Assessment Task 2 – Unit Project (UP)
Assessment type:
Unit Project (UP)
Assessment task description:

This is the second (2) assessment task you have to successfully complete to be deemed
competent in this unit of competency.
This assessment task requires you to complete a project.
You will receive your feedback within two weeks – you will be notified by your
trainer/assessor when results are available.
You must attempt all activities of the project for your trainer/assessor to assess your
competency in this assessment task.

Applicable conditions:

This project is untimed and are conducted as open book tests (this means you are able to
refer to your textbook).
You must read and respond to all criteria of the project.
You may handwrite/use computers to answer the criteria of the project.
You must complete the task independently.
No marks or grades are allocated for this assessment task. The outcome of the task will be
Satisfactory or Not Satisfactory.
As you complete this assessment task you are predominately demonstrating your practical
skills, techniques and knowledge to your trainer/assessor.
The trainer/assessor may ask you relevant questions on this assessment task to ensure that
this is your own work.



Resubmissions and reattempts:

Where a student’s answers are deemed not satisfactory after the first attempt, a
resubmission attempt will be allowed.
You must speak to your Trainer/Assessor if you have any difficulty in completing this task
and require reasonable adjustments (e.g. can be given as an oral assessment).
For more information, please refer to your RTO Student Handbook.

Location:

This assessment task may be completed in an independent learning environment or learning
management system.
Your trainer/assessor will provide you further information regarding the location of
completing this assessment task.

General Instructions for attempting the project:

You will be analyse enterprise data security requirements create new plan, review
encryption technologies and their respective costs in this assessment task.
Instructions analyse the existing security plan, create new plan, encrypt the data, and check
the system log to check for data compromises are provided within the assessment task.
You will be required to correctly attempt all activities of this assessment task.

How your trainer/assessor will assess your work?
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 39 of 67




This assessment task requires the student to successfully complete and submit a project.
Answers must demonstrate the student’s understanding and skills of the unit.
You will be assessed according to the provided performance checklist/ performance criteria.
Assessment objectives/ measurable learning outcome(s) are attached as performance
checklist/ performance criteria with this assessment task to ensure that you have
successfully completed and submitted the assessment task.
If all assessment tasks are deemed Satisfactory (S), then the unit outcome is Competent (C).
If at least one of the assessment task is deemed Not Satisfactory (NS), then the unit outcome
is Not Yet Competent (NYC).
Once all assessment tasks allocated to this Unit of Competency have been undertaken,
trainer/assessor will complete an Assessment plan to record the unit outcome. The outcome
will be either Competent (C) or Not Yet Competent (NYC).
The “Assessment Plan” is available with the Unit Assessment Pack (UAP) – Cover Sheet.

Purpose of the assessment task:
This assessment task is designed to evaluate your following skills and abilities to implement
integrated server solution.
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 40 of 67
Assessment Task 2 – Unit Project (UP)
Instructions to complete this assessment task:



Please write your responses in the template provided.
You may attach a separate sheet if required.
You must include the following particulars in the footer section of each page of the attached
sheets:
o Student ID or Student Name

o Unit ID or Unit Code
o Course ID or Course Code
o Trainer and assessor name

o Page numbers


You must staple the loose sheets together along with the cover page.
You must attach the loose sheets chronologically as per the page numbers.
Correction fluid and tape are not permitted. Please do any corrections by striking through
the incorrect words with one or two lines and rewriting the correct words.
The premise of the project must be closely related to the previous assessment task.
This submission must be well presented and follow the guidelines and instructions provided.
Please follow the format as indicated in the template section below.
One of the most important steps that you can take: proofread your project.
Project must be of 500-800 words in length, using 11-point font, double-spaced, and must
include a cover page, table of contents, introduction, body, summary or conclusion, and
works cited.
Appropriate citations are required.
All RTO policies are in effect, including the plagiarism policy.





Resources required to complete the assessment task:

Computer
Internet
MS Word

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 41 of 67
Scenario: –
HENNET BANK Limited-HBL is one of the renowned banks of Australia. HBL is an Australian retail
bank with headquarters in Melbourne, Victoria. The bank is one of the oldest financial institutions in
Victoria, and now has branches throughout Australia with a network of 252 branches, including 78
corporate branches and 166 “owner managed” branches. HBL is one of Australia’s leading regional
banks. They are also among the few still not owned by one of the big banks.
At HBL, most of our branches are run by local Owner-Managers. This means they’re running a small
business and understand what it means to deliver personal service.
The main Data Centre comprising of Servers is located at the Head Office in Melbourne along with
the IT department also housed at the same premises. HBL offers one of the most sophisticated
online services to its customers and all the credit goes to the IT department and the associated
stakeholders of the bank.
The centralised network of HBL is one of the best designed networks and comprised of all the
servers (DNS, WEB Server, Proxy, and Email), computers, printers, scanners, Bar code readers, token
machines, WiFi access points for laptops and Hand Held Devices. The Network has also its Intrustion
Detection SYSTEM –IDS and all this Local Network is connected to Internet. It has been recently
observed by the IT Department that the Bank’s Network infrastructure requires advanced and more
sophisticated security parameters and need to abolish the existing security measures been taken.
IT department is headed by the Information Systems Manager-DANE, while SAM is the Network
administrator and is responsible for the management of the network, configuration and the
implementation of the security parameters on the network. The IT department has decided to
design and implement perimeter devices for the security of the bank’s ICT networks.
The IT department will arrange an initial meeting to gain the trust of the Directors of the Bank. The
need to elaborate the requirement for the designing and the implementation of the perimeter
security for the ICT network infrastructure of the bank.
The job responsibilities of both the Information Systems Manager and the Network Administrator
are as under along with the network diagram of the bank:
Job responsibilities of the Information Systems Manager:









Direct research into the feasibility of major changes/overhaul for system infrastructure.
Develop and facilitate company relevant trainings for the departmental staff.
Write and submit price proposals for new technology needs.
Track and assure that monthly expenditures are within the budget.
Review newly programmed computer fixes and patches.
Assist with troubleshooting complex technological problems.
Lead disaster recovery efforts and preparation.
Conduct system audit and/or large scale system load tests.
Selecting and purchasing appropriate hardware and software
Managing IT budgets
Ensuring software licensing laws are followed
Implementing and managing security or integrity and backup procedures


Scheduling upgrades
Providing user training, support, advice and feedback
Testing and modifying systems to ensure that that they operate reliably

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 42 of 67



Managing secure network access for remote users
Keeping up to date with new technology
Designing maintenance procedures and putting them into operation

Job responsibilities of the Network Administrator:











Assess Bank’s network and computer system needs.
Install hardware and software.
Make upgrades and repairs as needed.
Oversee digital security.
Perform maintenance that all systems are operating.
Collect and analyze data to optimize performance.
Onboard users to network.
Train users on hardware and software.
Troubleshoot problems with the system.
Oversee local area network and wide area network.
Participate in Team meetings, providing input and suggestions, and prepare minutes of
discussion items.
Assist in gathering bid prices on equipment and supplies as needed.
Provide written document on a monthly basis which defines upcoming needs of network
which would require purchase of additional hardware or software.
Monitor and report licenses on applications to ensure compliance on a monthly basis.
Perform duties of coordinator in his/her absence.
Utilize technology to provide staff with a fast, accurate and secure method of gaining access
to information so they can service the member in the fastest and most efficient manner
possible.
Manage and maintain NOS tree and structure.



The Network Diagram of HBL is as below, illustrating the networked Servers and all the computers of
the bank:
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 43 of 67
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 44 of 67
Activity 1:
Task 1: (Role Play on requirements of the Perimeter Security)
The IT department needs to correspond with the management of the organisation to elaborate the
requirement of the design and implementation of the perimeter security. The IT department will
organise a meeting and explain the requirements to the General Manager Operations and one
member from the Board of Directors. After the elaboration of the requirements, they need to
complete the minutes of meetings and get it signed off by all the attendees including the member of
Board of Directors to initiate the implementation.
You will act as the Network Administrator and will elaborate in the meeting (role play) about the
requirements of the implementation of perimeter device. Your assessor/trainer will act as the
Information Systems Manager and will correspond with the management and the end users in
briefing the requirements. Two of the students will act as the General Manager Operations and the
Member of Board of Directors.
In the role-play you need to discuss the following:


Requirements of the designing and implementation of the Perimeter Security.
It will include:
o The nature of the security being required by the Bank’s ICT networki infrastructure

o Level of Security required for the Network
You are required to complete the following meeting minute’s template and submit to your
trainer/assessor.

Minutes of Meeting
Meeting Objective:
Attendees:
Venue:
Date:
No Points Discussed Actions Suggested Target Date

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 45 of 67

Signature of attendee 1: Signature of attendee 2:
Signature of attendee 3: Signature of attendee 4:

Task 2: Report – (Planning and designing of the Firewall Solution as perimeter security)
Before initiation of the implementation of the perimeter security, you need to prepare a report
including the planning and designing of the security solution. You will prepare the report and
present the report for final approval from the competent authority i.e. General Manager Operations
and the Information Systems Manager
In your report analyse the following points and complete the below given template for the report:


Research the expected security threats to the organisation’s network infrastructure
Explain in detail the available perimeter security options that can be used to make the
network secure
Designing of security perimeters as per the organisation’s requirements.

Template 1: Report on Planning and designing of the Firewall Solution as perimeter security

Purpose:
Department:
Stakeholders:
Supervised by:
Network Security Threats:

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 46 of 67

Perimeter Security Options:

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 47 of 67

Security Perimeter as per Organisation’s Requirements:

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 48 of 67
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 49 of 67
Performance criteria checklist for unit assessment task:

Trainer/ Assessor to complete
Does the candidate meet the
following criteria
Yes No Trainer/Assessor Comments
Discussed the requirements
for perimeter security
Signed off the minutes of
meeting form
Completed the template for
report
Explained the network
Security Threats
Explained the different
Perimeter Security Options
available
Explained the security
perimeter as per the
requirement of the
organisation

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 50 of 67
Unit Assessment Result Sheet (UARS)
Assessment Task 2 – Unit skills test (UST)
Student and Trainer/Assessor Details

Unit code ICTNWK509
Unit name Design and implement a security perimeter for ICT networks
Outcome of Unit
Assessment Task (UAT)
First attempt:Outcome (please make sure to tick the correct checkbox):
Satisfactory (S) ☐ or Not Satisfactory (NS) ☐
Date: _______(day)/ _______(month)/ ____________(year)
Second attempt:Outcome (please make sure to tick the correct checkbox):
Satisfactory (S) ☐ or Not Satisfactory (NS) ☐
Date: _______(day)/ _______(month)/ ____________(year)
Feedback to Student First attempt:Second attempt:
Student Declaration  I declare that the answers I have provided are my own work.
Where I have accessed information from other sources, I have
provided references and or links to my sources.

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 51 of 67

 I have kept a copy of all relevant notes and reference material
that I used as part of my submission.
 I have provided references for all sources where the
information is not my own. I understand the consequences of
falsifying documentation and plagiarism. I understand how
the assessment is structured. I accept that all work I submit
must be verifiable as my own.
 I understand that if I disagree with the assessment outcome, I
can appeal the assessment process, and either re-submit
additional evidence undertake gap training and or have my
submission re-assessed.
 All appeal options have been explained to me.
Student Signature
Date
Trainer/Assessor Name
Trainer/Assessor
Declaration
I hold:
 Vocational competencies at least to the level being delivered
 Current relevant industry skills
 Current knowledge and skills in VET, and undertake
 Ongoing professional development in VET
I declare that I have conducted an assessment of this candidate’s
submission. The assessment tasks were deemed current, sufficient,
valid and reliable. I declare that I have conducted a fair, valid, reliable,
and flexible assessment. I have provided feedback to the above
named candidate.
Trainer/Assessor Signature
Date
Office Use Only Outcome of Assessment has been entered onto the Student
Management System on _________________ (insert date)
by (insert Name) __________________________________

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 52 of 67
Unit Pre-Assessment Checklist (UPAC)
UAT 3 – Unit Project (UP)
Purpose of the checklist
The pre-assessment checklist helps students determine if they are ready for assessment. The
trainer/assessor must review the checklist with the student before the student attempts the
assessment task. If any items of the checklist are incomplete or not clear to the student, the
trainer/assessor must provide relevant information to the student to ensure they understand the
requirements of the assessment task. The student must ensure they are ready for the assessment task
before undertaking it.
Section 1: Information for Students

Please make sure you have completed the necessary prior learning before attempting this
assessment.
Please make sure your trainer/assessor clearly explained the assessment process and tasks to
be completed.
Please make sure you understand what evidence is required to be collected and how.
Please make sure you know your rights and the Complaints and Appeal process.
Please make sure you discuss any special needs or reasonable adjustments to be considered
during the assessment (refer to the Reasonable Adjustments Strategy Matrix and negotiate
these with your trainer/assessor).
Please make sure that you have access to a computer and the internet (if you prefer to type
the answers).
Please ensure that you have all the required resources needed to complete this Unit
Assessment Task (UAT).
Due date of this assessment task is according to your timetable.
In exceptional (compelling and compassionate) circumstances, an extension to submit an
assessment can be granted by the trainer/assessor.
Evidence of the compelling and compassionate circumstances must be provided together with
your request for an extension to submit your assessment work.
Request for an extension to submit your assessment work must be made before the due date
of this assessment task.



Section 2: Reasonable adjustments

Students with carer responsibilities, cultural or religious obligations, English as an additional
language, disability etc. can request for reasonable adjustments.
Please note, academic standards of the unit/course will not be lowered to accommodate the
needs of any student, but there is a requirement to be flexible about the way in which it is
delivered or assessed.
The Disability Standards for Education requires institutions to take reasonable steps to enable

the student with a disability to participate in education on the same basis as a student without
a disability.

Trainer/Assessor must complete the section below “Reasonable Adjustment Strategies
Matrix” to ensure the explanation and correct strategy have been recorded and implemented.
Trainer/Assessor must notify the administration/compliance and quality assurance
department for any reasonable adjustments made.
All evidence and supplementary documentation must be submitted with the assessment pack
to the administration/compliance and quality assurance department.

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 53 of 67

Reasonable Adjustment Strategies Matrix (Trainer/Assessor to complete)
Category Possible Issue Reasonable Adjustment Strategy
(select as applicable)
 LLN  Speaking
 Reading
 Writing
 Confidence
 Verbal assessment
 Presentations
 Demonstration of a skill
 Use of diagrams
 Use of supporting documents such as wordlists
 Non
English
Speaking
Background
 Speaking
 Reading
 Writing
 Cultural
background
 Confidence
 Discuss with the student and supervisor (if applicable)
whether language, literacy and numeracy are likely to
impact on the assessment process
 Use methods that do not require a higher level of
language or literacy than is required to perform the job role
 Use short sentences that do not contain large amounts
of information
 Clarify information by rephrasing, confirm understanding
 Read any printed information to the student
 Use graphics, pictures and colour coding instead of, or to
support, text
 Offer to write down, or have someone else write, oral
responses given by the student
 Ensure that the time available to complete the
assessment, while meeting enterprise requirements, takes
account of the student’s needs

Indigenous
 Knowledge and
understanding
 Flexibility
 Services
 Inappropriate
training and
assessment
 Culturally appropriate training
 Explore understanding of concepts and practical
application through oral assessment
 Flexible delivery
 Using group rather than individual assessments
 Assessment through completion of practical tasks in the
field after demonstration of skills and knowledge.
 Age  Educational
background
 Limited study
skills
 Make sure font size is not too small
 Trainer/Assessor should refer to the
student’s experience
 Ensure that the time available to complete the
assessment takes account of the student’s needs
 Provision of information or course materials in accessible
format.
 Changes in teaching practices, e.g. wearing an FM
microphone to enable a student to hear lectures
 Supply of specialised equipment or services, e.g. a note
taker for a student who cannot write
 Changes in lecture schedules and arrangements, e.g.
relocating classes to an accessible venue

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 54 of 67

 Changes to course design, e.g. substituting an
assessment task
 Modifications to physical environment, e.g. installing
lever taps, building ramps, installing a lift

Educational
background
 Reading
 Writing
 Numeracy
 Limited study
skills and/or
learning strategies
 Discuss with the Student previous learning experience
 Ensure learning and assessment methods meet the
student’s individual need
 Disability  Speaking
 Reading
 Writing
 Numeracy
 Limited study
skills and/or
learning strategies
 Identify the issues
 Create a climate of support
 Ensure access to support that the student has agreed to
 Appropriately structure the assessment
 provision of information or course materials in accessible
format, e.g. a text book in braille
 Changes in teaching practices, e.g. wearing an FM
microphone to enable a student to hear lectures
 Supply of specialised equipment or services, e.g. a note
taker for a student who cannot write
 Changes in lecture schedules and arrangements, e.g.
relocating classes to an accessible venue
 Changes to course design, e.g. substituting an
assessment task
 Modifications to physical environment, e.g. installing
lever taps, building ramps, installing a lift
Explanation of reasonable adjustments strategy used (If required)

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 55 of 67
Unit Assessment Task (UAT)
Assessment Task 3 – Unit Project (UP)
Assessment type:
Unit Project (UP)
Assessment task description:

This is the third (3) assessment task you have to successfully complete to be deemed
competent in this unit of competency.
This assessment task requires you to complete a project.
You will receive your feedback within two weeks – you will be notified by your
trainer/assessor when results are available.
You must attempt all activities of the project for your trainer/assessor to assess your
competency in this assessment task.

Applicable conditions:





This project is timed except activity 2.
You must read and respond to all criteria of the project.
You may handwrite/use computers to answer the criteria of the project.
You must complete the task independently.
No marks or grades are allocated for this assessment task. The outcome of the task will be
Satisfactory or Not Satisfactory.
As you complete this assessment task you are predominately demonstrating your practical
skills, techniques and knowledge to your trainer/assessor.
The trainer/assessor may ask you relevant questions on this assessment task to ensure that
this is your own work.

Resubmissions and reattempts:

Where a student’s answers are deemed not satisfactory after the first attempt, a
resubmission attempt will be allowed.
You must speak to your Trainer/Assessor if you have any difficulty in completing this task
and require reasonable adjustments (e.g. can be given as an oral assessment).
For more information, please refer to your RTO Student Handbook.

Location:


This assessment task may be completed in a simulated learning environment.
Your trainer/assessor will provide you further information regarding the location of
completing this assessment task.

General Instructions for attempting the project:


This assessment task is in continuation to the previous task.
You will be analyse the existing security plan, create new plan, encrypt the data, and check
the system log to check for data compromises in this assessment task.
You will be expanding the knowledge and skills acquired during the previous assessment
task.
Instructions analyse the existing security plan, create new plan, encrypt the data, and check
the system log to check for data compromises are provided within the assessment task.
You will be required to correctly attempt all activities of this assessment task.

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 56 of 67
How your trainer/assessor will assess your work?




This assessment task requires the student to successfully complete and submit a project.
Answers must demonstrate the student’s understanding and skills of the unit.
You will be assessed according to the provided performance checklist/ performance criteria.
Assessment objectives/ measurable learning outcome(s) are attached as performance
checklist/ performance criteria with this assessment task to ensure that you have
successfully completed and submitted the assessment task.
If all assessment tasks are deemed Satisfactory (S), then the unit outcome is Competent (C).
If at least one of the assessment task is deemed Not Satisfactory (NS), then the unit outcome
is Not Yet Competent (NYC).
Once all assessment tasks allocated to this Unit of Competency have been undertaken,
trainer/assessor will complete an Assessment plan to record the unit outcome. The outcome
will be either Competent (C) or Not Yet Competent (NYC).
The “Assessment Plan” is available with the Unit Assessment Pack (UAP) – Cover Sheet.

Purpose of the assessment task:
This assessment task is designed to evaluate your following skills and abilities:


Ability implement encryption systems and inform users of any impacts
Skill to monitor and document encryption issues and compromises, and notify appropriate
person.

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 57 of 67
Assessment Task 3 – Unit Project (UP)
Instructions to complete this assessment task:



Please write your responses in the template provided.
You may attach a separate sheet if required.
You must include the following particulars in the footer section of each page of the attached
sheets:
o Student ID or Student Name

o Unit ID or Unit Code
o Course ID or Course Code
o Trainer and assessor name

o Page numbers


You must staple the loose sheets together along with the cover page.
You must attach the loose sheets chronologically as per the page numbers.
Correction fluid and tape are not permitted. Please do any corrections by striking through
the incorrect words with one or two lines and rewriting the correct words.
The premise of the project must be closely related to the previous assessment task.
This submission must be well presented and follow the guidelines and instructions provided.
Please follow the format as indicated in the template section below.
One of the most important steps that you can take: proofread your project.
Project must be of 500-800 words in length, using 11-point font, double-spaced, and must
include a cover page, table of contents, introduction, body, summary or conclusion, and
works cited.
Appropriate citations are required.
All RTO policies are in effect, including the plagiarism policy.





Resources required to complete the assessment task:

Computer
Internet
MS Word

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 58 of 67
Activity 1 – (Deployment of the Perimeter security)
This activity is a continuing from the previous assessment task.
After the detailed elaboration of the requirements for the network security perimeter and
completion of the planning phase by completing the Report, you need to deploy the perimeter
security. For this it has been decided by the IT department that they will implement the Firewall for
the better security of the organisation’s network infrastructure. The Report in the previous task
defines its importance. The Assessor/trainer will act as the Information Systems Manager and will
supervise the deployment of the perimeter security. While, you need to implement the firewall as
per the requirements of the organisation.
Note: For This activity RTO/Assessor will provide you the following:






A site where perimeter installation may be conducted
Cabling
Networked (LAN) computers
Site or prototype where perimeter security may be implemented and managed
Perimeter devices
Organisational security requirements.

You need to implement the Perimeter security solution as per the given points:

Implement the Firewall as the perimeter device and make all the configurations as per the
requirements of the design
o Configure the DMZ interface

o Configure a general firewall for LAN traffic
o Configure a general firewall for DMZ traffic

o Allow selected traffic to the DMZ
For the setup of the organisation and as per the scenario it is recommended to implement 3
legged Firewall
Configure both the basic and advanced functionality of the firewall to the network to allow
access including the following standard services considerations in prospect:

o HTTP (Web surfing)
o HTTPS (secure HTTP)
o FTP (file transfers)
o SMTP (e-mail)
o ICMP (reporting services; ping)
o Telnet (bi-directional communication sessions)


Configure the backup of the firewall so that it can be restored in case of disaster
The firewall needs to be designed and configured that it ensure the continuity of services in
both the following events:
o Update of Device

o Device Failure
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 59 of 67
Performance criteria checklist for unit assessment task:

Trainer/ Assessor to complete
Assessment activities to be
completed
 Deployment of the Perimeter security
 For a full project outline, please refer to the student
assessment instructions
Resources required for the
unit assessment task
 Unit assessment guide template
 Access to live or simulated working environment
 Interaction with others
Does the candidate meet the
following criteria
Yes No Trainer/Assessor Comments
Implemented the Firewall as
Perimeter security
Configured the DMZ interface
Configured the Firewall for LAN
and DMZ
Implemented the three legged
Firewall
Configured both the basic and
advanced functions of Firewall
Backed up the device
configuration
 Designed and Configured for
continuity of Service

Activity 2: (Configuration of a VPN Solution)
ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 60 of 67
TASK 1: Continuation to the previous tasks, you need to implement and configure a VPN solution for
the organisation’s network infrastructure. The VPN solution will help to secure the connectivity of
the HBL Bank’s head office to the regional offices. The assessor/trainer will supervise the
implementation and the configuration of the VPN solution. You will act as the Network administrator
and will implement the VPN solution:
Note: For This activity RTO/Assessor will provide you the following:






A site where perimeter installation may be conducted
Cabling
Networked (LAN) computers
Site or prototype where perimeter security may be implemented and managed
Perimeter devices
Organisational security requirements.

You need to implement the Virtual Private Network solution as per the given points:


Configure a site to site Virtual Private Network for the network infrastructure
Configure the perimeter as a remote access VPN server according to the scenario and the
network diagram of the bank
Also, configure the VPN tunnel forwarding
Check the configured VPN for connectivity issues, diagnose the issues and resolve these
connectivity issues

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 61 of 67
TASK 2: (Testing of the Perimeter Solution)
In continuation of the Task 1, perform the testing of the VPN solution. The testing will help to not
only resolve the VPN issues but will also help to enhance the performance of the perimeter device
security. The trainer/assessor will act as the Information Systems Manager and will supervise the
testing process. Once the testing is done, you need to design a report on the tests results. You need
to perform the following tasks for the testing task and also need to complete the template given
below for test results:



Test the basic and advanced functionality of the VPN and Firewall features
Conduct penetration testing in order to confirm the requirements of the security
Monitor the performance of the perimeter device along with the monitoring of the security
breaches
Prepare the report as per the given template for the tests results and forward it to the
relevant personal for sign off.

Template for Report on TEST Results:

Purpose:
Stakeholders:
Roles and Responsibilities:
Scope of Testing
Role Responsibilities Contact Information

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 62 of 67

Assumptions for Test Execution
Test Completion
Security requirements analysis
Test Results Report Approval Signatures
I have reviewed the System Name Test Results Report and accept the analysis and findings
within.

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 63 of 67

_______________________________________ __________Security Control Assessor Full Name DateSecurity Control Assessor_______________________________________ __________System Owner Full Name DateSystem Owner_______________________________________ __________Information System Security Officer Full
Name DateInformation System Security Officer_______________________________________ __________Privacy Coordinator Full Name DatePrivacy Coordinator

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 64 of 67
Performance criteria checklist for unit assessment task:

Trainer/ Assessor to complete
Assessment activities to be
completed
 Configuration of a VPN Solution
 Testing of the Perimeter Solution
 For a full project outline, please refer to the student
assessment instructions
Resources required for the
unit assessment task
 Unit assessment guide template
 Access to live or simulated working environment
 Interaction with others
Does the candidate meet the
following criteria
Yes No Trainer/Assessor Comments
Configured a Site to Site VPN
Configured Perimeter as
Remote Access VPN server
Tested the VPN functionality
Conducted the penetration
testing
Monitored the performance of
Perimeter device
Completed the template for
Tests Results

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 65 of 67

Got approval by sign off from
the authority

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 66 of 67
Unit Assessment Result Sheet (UARS)
Assessment Task 3 – Unit skills test (UST)
Student and Trainer/Assessor Details

Unit code ICTNWK509
Unit name Design and implement a security perimeter for ICT networks
Outcome of Unit
Assessment Task (UAT)
First attempt:Outcome (please make sure to tick the correct checkbox):
Satisfactory (S) ☐ or Not Satisfactory (NS) ☐
Date: _______(day)/ _______(month)/ ____________(year)
Second attempt:Outcome (please make sure to tick the correct checkbox):
Satisfactory (S) ☐ or Not Satisfactory (NS) ☐
Date: _______(day)/ _______(month)/ ____________(year)
Feedback to Student First attempt:Second attempt:

ICTNWK509 – Design and implement a security perimeter for ICT networks
Student Assessment Pack
Australian Training School trading as Southern Academy of Business and Technology
Level 1 and 4 Bathurst Street Sydney NSW 2000 | Phone: 1300 852 205 | RTO Code: 31595 | CRICOS Provider Code: 03602E
ICTNWK509 – Design and implement a security perimeter for ICT networks: Student Assessment Task
Version : 1.2 Last Updated : 22 December 2017 Next Update: 22 December 2018 Page 67 of 67

Student Declaration  I declare that the answers I have provided are my own work.
Where I have accessed information from other sources, I have
provided references and or links to my sources.
 I have kept a copy of all relevant notes and reference material
that I used as part of my submission.
 I have provided references for all sources where the
information is not my own. I understand the consequences of
falsifying documentation and plagiarism. I understand how
the assessment is structured. I accept that all work I submit
must be verifiable as my own.
 I understand that if I disagree with the assessment outcome, I
can appeal the assessment process, and either re-submit
additional evidence undertake gap training and or have my
submission re-assessed.
 All appeal options have been explained to me.
Student Signature
Date
Trainer/Assessor Name
Trainer/Assessor
Declaration
I hold:
 Vocational competencies at least to the level being delivered
 Current relevant industry skills
 Current knowledge and skills in VET, and undertake
 Ongoing professional development in VET
I declare that I have conducted an assessment of this candidate’s
submission. The assessment tasks were deemed current, sufficient,
valid and reliable. I declare that I have conducted a fair, valid, reliable,
and flexible assessment. I have provided feedback to the above
named candidate.
Trainer/Assessor Signature
Date
Office Use Only Outcome of Assessment has been entered onto the Student
Management System on _________________ (insert date)
by (insert Name) __________________________________

The post ICTNWK509 – Design and implement a security appeared first on My Assignment Online.

Plagiarism Free Assignment Help

Expert Help With This Assignment — On Your Terms

Native UK, USA & Australia writers Deadline from 3 hours 100% Plagiarism-Free — Turnitin included Unlimited free revisions Free to submit — compare quotes
Scroll to Top