Assignment Task
1. Background information
You are a network administrator working for XYZ company. Your manager has received reports that the company’s website www.xyzcompany.com is not working. Users attempting to access the website report that they receive a ‘page cannot be displayed’ error in their browser. Your manager asks you to investigate the situation, analyse the potential cause or causes of the website service disruption, suggest solutions and outline their limitations. You must detail your findings in a report.
1.1 Preliminary investigation
You confirm the interrupted service issue by visiting www.xyzcompany.com from your browser. The error message is displayed. Following this, you decide to perform some basic troubleshooting. You attempt to visit the website using the IP address 192.168.170.8 directly which also results in the same error message.
Based on this preliminary investigation, you suspect there may be a problem with the web server. You wonder what has gone wrong, and whether an attack has taken place. You must investigate further, so that you understand what happened and can suggest appropriate solutions.
Please be aware this is just a scenario.
2. Assessment task
This is a group assignment. Each group is a team of two people working in network administration for XYZ company. (The unit coordinator will allocate students to teams). Your team must complete an investigation and write a report for the XYZ company manager.
2.1 Phase 1: Extract a sample of the network traffic on the Web server.
Download the capture file IFN553_ScenarioB_ICMP.pcapng. It is in the same folder as this assessment task specification.
Note that the capture file provided is only a very small sample of the total traffic captured from the web server.
For this assessment task, you can assume the rest of the capture shows the same trends, with patterns that are similar and consistent with those in the provided Scenario capture file. The sample you have been provided is small but representative.
2.2 Phase 2: Data examination and analysis
What would you expect to see in a web server capture under normal operation? Provide a detailed and technical explanation of the ICMP protocol.
Examine the data in the Scenario capture file. Analyse the data, compare this with normal expected behaviour and determine what has taken place. Record your observations and make connections between the specific data items included in the file and your description of the events that likely occurred.
Consider the security goals for the organisation that may have been compromised, the vulnerabilities (within the organisation and within the ICMP protocol itself) that have contributed to the incident and the threats that acted on them.
Has there been an attack? If so, what type of attack (active or passive)? Or is this problem caused by something else? Justify your claim. That is, refer to the data in the file to provide supporting evidence.
What are the possible technical and organisational consequences of this incident for XYZ company?
This IFN553 – IT Assignment has been solved by our IT experts at Schooling Best. Our Assignment Writing Experts are efficient to provide a fresh solution to this question. We are serving more than 10000+ Students in Australia, UK & US by helping them to score HD in their academics. Our Experts are well trained to follow all marking rubrics & referencing style.
Be it a used or new solution, the quality of the work submitted by our assignment experts remains unhampered. You may continue to expect the same or even better quality with the used and new assignment solution files respectively. There’s one thing to be noticed that you could choose one between the two and acquire an HD either way. You could choose a new assignment solution file to get yourself an exclusive,
plagiarism (with free Turnitin file), expert quality assignment or order an old solution file that was considered worthy of the highest distinction.
